Lucene search

K
cve[email protected]CVE-2008-1138
HistoryMar 04, 2008 - 8:44 p.m.

CVE-2008-1138

2008-03-0420:44:00
CWE-119
web.nvd.nist.gov
19
cve-2008-1138
dlmfenc.sys
deslock+
denial of service
system crash
vulnerability
nvd

4.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.1%

DLMFENC.sys 1.0.0.26 in DESlock+ 3.2.6 and earlier allows local users to cause a denial of service (system crash) via a certain ZERO_MEM DLMFENC_IOCTL request to \.\DLKPFSD_Device, aka the “ring0 link list zero” vulnerability.

Affected configurations

NVD
Node
deslockdeslockRange3.2.6
CPENameOperatorVersion
deslock:deslockdeslockle3.2.6

4.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.1%

Related for CVE-2008-1138