Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2008-5025
HistoryNov 17, 2008 - 11:30 p.m.

CVE-2008-5025

2008-11-1723:30:00
CWE-119
[email protected]
web.nvd.nist.gov
47
9
cve-2008-5025
buffer overflow
hfs filesystem
denial of service
memory corruption
system crash
nvd

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

5.5 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

65.0%

JSON

Stack-based buffer overflow in the hfs_cat_find_brec function in fs/hfs/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to cause a denial of service (memory corruption or system crash) via an hfs filesystem image with an invalid catalog namelength field, a related issue to CVE-2008-4933.

Affected configurations

NVD
Node
linuxlinux_kernelRange≤2.6.28
OR
linuxlinux_kernelMatch2.2.27
OR
linuxlinux_kernelMatch2.4.36
OR
linuxlinux_kernelMatch2.4.36.1
OR
linuxlinux_kernelMatch2.4.36.2
OR
linuxlinux_kernelMatch2.4.36.3
OR
linuxlinux_kernelMatch2.4.36.4
OR
linuxlinux_kernelMatch2.4.36.5
OR
linuxlinux_kernelMatch2.4.36.6
OR
linuxlinux_kernelMatch2.6
OR
linuxlinux_kernelMatch2.6.18
OR
linuxlinux_kernelMatch2.6.18rc1
OR
linuxlinux_kernelMatch2.6.18rc2
OR
linuxlinux_kernelMatch2.6.18rc3
OR
linuxlinux_kernelMatch2.6.18rc4
OR
linuxlinux_kernelMatch2.6.18rc5
OR
linuxlinux_kernelMatch2.6.18rc6
OR
linuxlinux_kernelMatch2.6.18rc7
OR
linuxlinux_kernelMatch2.6.19.4
OR
linuxlinux_kernelMatch2.6.19.5
OR
linuxlinux_kernelMatch2.6.19.6
OR
linuxlinux_kernelMatch2.6.19.7
OR
linuxlinux_kernelMatch2.6.20.16
OR
linuxlinux_kernelMatch2.6.20.17
OR
linuxlinux_kernelMatch2.6.20.18
OR
linuxlinux_kernelMatch2.6.20.19
OR
linuxlinux_kernelMatch2.6.20.20
OR
linuxlinux_kernelMatch2.6.20.21
OR
linuxlinux_kernelMatch2.6.21.5
OR
linuxlinux_kernelMatch2.6.21.6
OR
linuxlinux_kernelMatch2.6.21.7
OR
linuxlinux_kernelMatch2.6.22
OR
linuxlinux_kernelMatch2.6.22.1
OR
linuxlinux_kernelMatch2.6.22.2
OR
linuxlinux_kernelMatch2.6.22.8
OR
linuxlinux_kernelMatch2.6.22.9
OR
linuxlinux_kernelMatch2.6.22.10
OR
linuxlinux_kernelMatch2.6.22.11
OR
linuxlinux_kernelMatch2.6.22.12
OR
linuxlinux_kernelMatch2.6.22.13
OR
linuxlinux_kernelMatch2.6.22.14
OR
linuxlinux_kernelMatch2.6.22.15
OR
linuxlinux_kernelMatch2.6.22.17
OR
linuxlinux_kernelMatch2.6.22.18
OR
linuxlinux_kernelMatch2.6.22.19
OR
linuxlinux_kernelMatch2.6.22.20
OR
linuxlinux_kernelMatch2.6.22.21
OR
linuxlinux_kernelMatch2.6.22.22
OR
linuxlinux_kernelMatch2.6.22_rc1
OR
linuxlinux_kernelMatch2.6.22_rc7
OR
linuxlinux_kernelMatch2.6.23
OR
linuxlinux_kernelMatch2.6.23.8
OR
linuxlinux_kernelMatch2.6.23.9
OR
linuxlinux_kernelMatch2.6.23.10
OR
linuxlinux_kernelMatch2.6.23.11
OR
linuxlinux_kernelMatch2.6.23.12
OR
linuxlinux_kernelMatch2.6.23.13
OR
linuxlinux_kernelMatch2.6.23.15
OR
linuxlinux_kernelMatch2.6.23.16
OR
linuxlinux_kernelMatch2.6.23.17
OR
linuxlinux_kernelMatch2.6.23_rc1
OR
linuxlinux_kernelMatch2.6.24
OR
linuxlinux_kernelMatch2.6.24.1
OR
linuxlinux_kernelMatch2.6.24.2
OR
linuxlinux_kernelMatch2.6.24.3
OR
linuxlinux_kernelMatch2.6.24.4
OR
linuxlinux_kernelMatch2.6.24.5
OR
linuxlinux_kernelMatch2.6.24.6
OR
linuxlinux_kernelMatch2.6.24.7
OR
linuxlinux_kernelMatch2.6.24_rc1
OR
linuxlinux_kernelMatch2.6.24_rc4
OR
linuxlinux_kernelMatch2.6.24_rc5
OR
linuxlinux_kernelMatch2.6.25
OR
linuxlinux_kernelMatch2.6.25x86_64
OR
linuxlinux_kernelMatch2.6.25.1
OR
linuxlinux_kernelMatch2.6.25.1x86_64
OR
linuxlinux_kernelMatch2.6.25.2
OR
linuxlinux_kernelMatch2.6.25.2x86_64
OR
linuxlinux_kernelMatch2.6.25.3
OR
linuxlinux_kernelMatch2.6.25.3x86_64
OR
linuxlinux_kernelMatch2.6.25.4
OR
linuxlinux_kernelMatch2.6.25.4x86_64
OR
linuxlinux_kernelMatch2.6.25.5
OR
linuxlinux_kernelMatch2.6.25.5x86_64
OR
linuxlinux_kernelMatch2.6.25.6
OR
linuxlinux_kernelMatch2.6.25.6x86_64
OR
linuxlinux_kernelMatch2.6.25.7
OR
linuxlinux_kernelMatch2.6.25.7x86_64
OR
linuxlinux_kernelMatch2.6.25.8
OR
linuxlinux_kernelMatch2.6.25.8x86_64
OR
linuxlinux_kernelMatch2.6.25.9
OR
linuxlinux_kernelMatch2.6.25.9x86_64
OR
linuxlinux_kernelMatch2.6.25.10
OR
linuxlinux_kernelMatch2.6.25.10x86_64
OR
linuxlinux_kernelMatch2.6.25.11
OR
linuxlinux_kernelMatch2.6.25.11x86_64
OR
linuxlinux_kernelMatch2.6.25.12
OR
linuxlinux_kernelMatch2.6.25.12x86_64
OR
linuxlinux_kernelMatch2.6.25.13
OR
linuxlinux_kernelMatch2.6.25.14
OR
linuxlinux_kernelMatch2.6.25.15
OR
linuxlinux_kernelMatch2.6.25.16
OR
linuxlinux_kernelMatch2.6.25.17
OR
linuxlinux_kernelMatch2.6.26
OR
linuxlinux_kernelMatch2.6.26.1
OR
linuxlinux_kernelMatch2.6.26.2
OR
linuxlinux_kernelMatch2.6.26.3
OR
linuxlinux_kernelMatch2.6.26.4
OR
linuxlinux_kernelMatch2.6.26.5
OR
linuxlinux_kernelMatch2.6.27

References

Social References

More

Related

nvd 2
ubuntucve 2
prion 2
cvelist 2
openvas 27
nessus 16
seebug 1
veracode 2
securityvulns 4
suse 3
redhat 2
oraclelinux 3
centos 1
cve 1
debian 2
ubuntu 1
osv 2
nvd
nvd
CVE-2008-5025
2008-11-17 23:30:00
CVE-2008-4933
2008-11-05 15:00:14
ubuntucve
ubuntucve
CVE-2008-5025
2008-11-17 00:00:00
CVE-2008-4933
2008-11-05 00:00:00
prion
prion
Stack overflow
2008-11-17 23:30:00
Buffer overflow
2008-11-05 15:00:00
cvelist
cvelist
CVE-2008-5025
2008-11-17 23:00:00
CVE-2008-4933
2008-11-05 14:51:00
openvas
openvas
Mandriva Update for kernel MDVSA-2008:246 (kernel)
2009-04-09 00:00:00
Mandriva Update for kernel MDVSA-2008:246 (kernel)
2009-04-09 00:00:00
SLES10: Security update for Linux kernel
2009-10-13 00:00:00
nessus
nessus
Mandriva Linux Security Advisory : kernel (MDVSA-2008:246)
2009-04-23 00:00:00
SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 5927)
2012-05-17 00:00:00
SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 5924)
2009-09-24 00:00:00
seebug
seebug
Linux Kernel hfs_cat_find_brec()本地拒绝服务漏洞
2008-11-17 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:30:55
Denial Of Service (DoS)
2020-04-10 00:30:52
securityvulns
securityvulns
[ MDVSA-2008:246 ] kernel
2008-12-29 00:00:00
Linux kernel multiple security vulnerabilities
2008-12-29 00:00:00
[ MDVSA-2008:234 ] kernel
2008-11-24 00:00:00
suse
suse
local privilege escalation in kernel
2009-01-29 16:12:11
local privilege escalation in kernel
2009-01-21 20:06:24
local privilege escalation in kernel-debug
2009-01-20 17:01:02
redhat
redhat
(RHSA-2009:0264) Important: kernel security update
2009-02-10 00:00:00
(RHSA-2009:0014) Important: kernel security and bug fix update
2009-01-14 00:00:00
oraclelinux
oraclelinux
kernel security update
2009-02-11 00:00:00
kernel security and bug fix update
2009-01-15 00:00:00
Oracle Enterprise Linux 5.4 kernel security and bug fix update
2009-09-08 00:00:00
centos
centos
kernel security update
2009-01-15 13:41:46
cve
cve
CVE-2008-4933
2008-11-05 15:00:14
debian
debian
[SECURITY] [DSA 1687-1] New Linux 2.6.18 packages fix several vulnerabilities
2008-12-15 21:33:39
[SECURITY] [DSA 1681-1] New Linux 2.6.24 packages fix several vulnerabilities
2008-12-04 17:59:11
ubuntu
ubuntu
Linux kernel vulnerabilities
2008-11-27 00:00:00
osv
osv
fai-kernels linux-2.6 user-mode-linux - several vulnerabilities
2008-12-15 00:00:00
linux-2.6.24 - several vulnerabilities
2008-12-04 00:00:00

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

5.5 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

65.0%

JSON
Related for CVE-2008-5025
nvd2ubuntucve2prion2cvelist2openvas27nessus16seebug1veracode2securityvulns4suse3redhat2oraclelinux3centos1cve1debian2ubuntu1osv2