Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2008-3196HistoryJul 16, 2008 - 6:41 p.m.
CVE-2008-3196
2008-07-1618:41:00
Debian Security Bug Tracker
security-tracker.debian.org
6
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
0.003 Low
EPSS
Percentile
68.5%
skeleton.c in yacc does not properly handle reduction of a rule with an empty right hand side, which allows context-dependent attackers to cause an out-of-bounds stack access when the yacc stack pointer points to the end of the stack.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | byacc | < 20070509-1.1 | byacc_20070509-1.1_all.deb |
| Debian | 11 | all | byacc | < 20070509-1.1 | byacc_20070509-1.1_all.deb |
| Debian | 10 | all | byacc | < 20070509-1.1 | byacc_20070509-1.1_all.deb |
| Debian | 999 | all | byacc | < 20070509-1.1 | byacc_20070509-1.1_all.deb |
| Debian | 13 | all | byacc | < 20070509-1.1 | byacc_20070509-1.1_all.deb |
Related
cvelist
cvelist
CVE-2008-3196
2008-07-16 18:00:00
prion
prion
Design/Logic Flaw
2008-07-16 18:41:00
nvd
nvd
CVE-2008-3196
2008-07-16 18:41:00
nessus
nessus
RHEL 4 : byacc (Unpatched Vulnerability)
2024-06-03 00:00:00
RHEL 3 : byacc (Unpatched Vulnerability)
2024-06-03 00:00:00
RHEL 5 : byacc (Unpatched Vulnerability)
2024-06-03 00:00:00
ubuntucve
ubuntucve
CVE-2008-3196
2008-07-16 00:00:00
cve
cve
CVE-2008-3196
2008-07-16 18:41:00
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
0.003 Low
EPSS
Percentile
68.5%
Related for DEBIANCVE:CVE-2008-3196