CVE-2008-5025

EPSS 1.2%
Published 17.11.2008 23:30:00
Last modified 09.04.2025 00:30:58
Source cve@mitre.org
Teams watchlist Login
Open Login

Stack-based buffer overflow in the hfs_cat_find_brec function in fs/hfs/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to cause a denial of service (memory corruption or system crash) via an hfs filesystem image with an invalid catalog namelength field, a related issue to CVE-2008-4933.

Affected products Warnungen 0 Metrics 2 CWE 1 References 32

Data is provided by the National Vulnerability Database (NVD)

Linux ≫ Linux Kernel Version <= 2.6.28

Linux ≫ Linux Kernel Version2.2.27

Linux ≫ Linux Kernel Version2.4.36

Linux ≫ Linux Kernel Version2.4.36.1

Linux ≫ Linux Kernel Version2.4.36.2

Linux ≫ Linux Kernel Version2.4.36.3

Linux ≫ Linux Kernel Version2.4.36.4

Linux ≫ Linux Kernel Version2.4.36.5

Linux ≫ Linux Kernel Version2.4.36.6

Linux ≫ Linux Kernel Version2.6

Linux ≫ Linux Kernel Version2.6.18

Linux ≫ Linux Kernel Version2.6.18 Updaterc1

Linux ≫ Linux Kernel Version2.6.18 Updaterc2

Linux ≫ Linux Kernel Version2.6.18 Updaterc3

Linux ≫ Linux Kernel Version2.6.18 Updaterc4

Linux ≫ Linux Kernel Version2.6.18 Updaterc5

Linux ≫ Linux Kernel Version2.6.18 Updaterc6

Linux ≫ Linux Kernel Version2.6.18 Updaterc7

Linux ≫ Linux Kernel Version2.6.19.4

Linux ≫ Linux Kernel Version2.6.19.5

Linux ≫ Linux Kernel Version2.6.19.6

Linux ≫ Linux Kernel Version2.6.19.7

Linux ≫ Linux Kernel Version2.6.20.16

Linux ≫ Linux Kernel Version2.6.20.17

Linux ≫ Linux Kernel Version2.6.20.18

Linux ≫ Linux Kernel Version2.6.20.19

Linux ≫ Linux Kernel Version2.6.20.20

Linux ≫ Linux Kernel Version2.6.20.21

Linux ≫ Linux Kernel Version2.6.21.5

Linux ≫ Linux Kernel Version2.6.21.6

Linux ≫ Linux Kernel Version2.6.21.7

Linux ≫ Linux Kernel Version2.6.22

Linux ≫ Linux Kernel Version2.6.22.1

Linux ≫ Linux Kernel Version2.6.22.2

Linux ≫ Linux Kernel Version2.6.22.8

Linux ≫ Linux Kernel Version2.6.22.9

Linux ≫ Linux Kernel Version2.6.22.10

Linux ≫ Linux Kernel Version2.6.22.11

Linux ≫ Linux Kernel Version2.6.22.12

Linux ≫ Linux Kernel Version2.6.22.13

Linux ≫ Linux Kernel Version2.6.22.14

Linux ≫ Linux Kernel Version2.6.22.15

Linux ≫ Linux Kernel Version2.6.22.17

Linux ≫ Linux Kernel Version2.6.22.18

Linux ≫ Linux Kernel Version2.6.22.19

Linux ≫ Linux Kernel Version2.6.22.20

Linux ≫ Linux Kernel Version2.6.22.21

Linux ≫ Linux Kernel Version2.6.22.22

Linux ≫ Linux Kernel Version2.6.22_rc1

Linux ≫ Linux Kernel Version2.6.22_rc7

Linux ≫ Linux Kernel Version2.6.23

Linux ≫ Linux Kernel Version2.6.23.8

Linux ≫ Linux Kernel Version2.6.23.9

Linux ≫ Linux Kernel Version2.6.23.10

Linux ≫ Linux Kernel Version2.6.23.11

Linux ≫ Linux Kernel Version2.6.23.12

Linux ≫ Linux Kernel Version2.6.23.13

Linux ≫ Linux Kernel Version2.6.23.15

Linux ≫ Linux Kernel Version2.6.23.16

Linux ≫ Linux Kernel Version2.6.23.17

Linux ≫ Linux Kernel Version2.6.23_rc1

Linux ≫ Linux Kernel Version2.6.24

Linux ≫ Linux Kernel Version2.6.24.1

Linux ≫ Linux Kernel Version2.6.24.2

Linux ≫ Linux Kernel Version2.6.24.3

Linux ≫ Linux Kernel Version2.6.24.4

Linux ≫ Linux Kernel Version2.6.24.5

Linux ≫ Linux Kernel Version2.6.24.6

Linux ≫ Linux Kernel Version2.6.24.7

Linux ≫ Linux Kernel Version2.6.24_rc1

Linux ≫ Linux Kernel Version2.6.24_rc4

Linux ≫ Linux Kernel Version2.6.24_rc5

Linux ≫ Linux Kernel Version2.6.25

Linux ≫ Linux Kernel Version2.6.25 Editionx86_64

Linux ≫ Linux Kernel Version2.6.25.1

Linux ≫ Linux Kernel Version2.6.25.1 Editionx86_64

Linux ≫ Linux Kernel Version2.6.25.2

Linux ≫ Linux Kernel Version2.6.25.2 Editionx86_64

Linux ≫ Linux Kernel Version2.6.25.3

Linux ≫ Linux Kernel Version2.6.25.3 Editionx86_64

Linux ≫ Linux Kernel Version2.6.25.4

Linux ≫ Linux Kernel Version2.6.25.4 Editionx86_64

Linux ≫ Linux Kernel Version2.6.25.5

Linux ≫ Linux Kernel Version2.6.25.5 Editionx86_64

Linux ≫ Linux Kernel Version2.6.25.6

Linux ≫ Linux Kernel Version2.6.25.6 Editionx86_64

Linux ≫ Linux Kernel Version2.6.25.7

Linux ≫ Linux Kernel Version2.6.25.7 Editionx86_64

Linux ≫ Linux Kernel Version2.6.25.8

Linux ≫ Linux Kernel Version2.6.25.8 Editionx86_64

Linux ≫ Linux Kernel Version2.6.25.9

Linux ≫ Linux Kernel Version2.6.25.9 Editionx86_64

Linux ≫ Linux Kernel Version2.6.25.10

Linux ≫ Linux Kernel Version2.6.25.10 Editionx86_64

Linux ≫ Linux Kernel Version2.6.25.11

Linux ≫ Linux Kernel Version2.6.25.11 Editionx86_64

Linux ≫ Linux Kernel Version2.6.25.12

Linux ≫ Linux Kernel Version2.6.25.12 Editionx86_64

Linux ≫ Linux Kernel Version2.6.25.13

Linux ≫ Linux Kernel Version2.6.25.14

Linux ≫ Linux Kernel Version2.6.25.15

Linux ≫ Linux Kernel Version2.6.25.16

Linux ≫ Linux Kernel Version2.6.25.17

Linux ≫ Linux Kernel Version2.6.26

Linux ≫ Linux Kernel Version2.6.26.1

Linux ≫ Linux Kernel Version2.6.26.2

Linux ≫ Linux Kernel Version2.6.26.3

Linux ≫ Linux Kernel Version2.6.26.4

Linux ≫ Linux Kernel Version2.6.26.5

Linux ≫ Linux Kernel Version2.6.27

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	1.2%	0.77

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.8	10	6.9	AV:N/AC:L/Au:N/C:N/I:N/A:C

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://secunia.com/advisories/32918

http://www.ubuntu.com/usn/usn-679-1

http://secunia.com/advisories/33556

http://www.redhat.com/support/errata/RHSA-2009-0014.html

http://secunia.com/advisories/32998

http://secunia.com/advisories/33180

http://www.debian.org/security/2008/dsa-1681

http://www.debian.org/security/2008/dsa-1687

http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00006.html

http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00010.html

http://rhn.redhat.com/errata/RHSA-2009-0264.html

http://secunia.com/advisories/33641