Lucene search

[email protected]NVD:CVE-2008-5025

HistoryNov 17, 2008 - 11:30 p.m.

CVE-2008-5025

2008-11-1723:30:00

CWE-119

[email protected]

web.nvd.nist.gov

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

5.6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

65.0%

JSON

Stack-based buffer overflow in the hfs_cat_find_brec function in fs/hfs/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to cause a denial of service (memory corruption or system crash) via an hfs filesystem image with an invalid catalog namelength field, a related issue to CVE-2008-4933.

Affected configurations

NVD

Node

linuxlinux_kernelRange≤2.6.28

linuxlinux_kernelMatch2.2.27

linuxlinux_kernelMatch2.4.36

linuxlinux_kernelMatch2.4.36.1

linuxlinux_kernelMatch2.4.36.2

linuxlinux_kernelMatch2.4.36.3

linuxlinux_kernelMatch2.4.36.4

linuxlinux_kernelMatch2.4.36.5

linuxlinux_kernelMatch2.4.36.6

linuxlinux_kernelMatch2.6

linuxlinux_kernelMatch2.6.18

linuxlinux_kernelMatch2.6.18rc1

linuxlinux_kernelMatch2.6.18rc2

linuxlinux_kernelMatch2.6.18rc3

linuxlinux_kernelMatch2.6.18rc4

linuxlinux_kernelMatch2.6.18rc5

linuxlinux_kernelMatch2.6.18rc6

linuxlinux_kernelMatch2.6.18rc7

linuxlinux_kernelMatch2.6.19.4

linuxlinux_kernelMatch2.6.19.5

linuxlinux_kernelMatch2.6.19.6

linuxlinux_kernelMatch2.6.19.7

linuxlinux_kernelMatch2.6.20.16

linuxlinux_kernelMatch2.6.20.17

linuxlinux_kernelMatch2.6.20.18

linuxlinux_kernelMatch2.6.20.19

linuxlinux_kernelMatch2.6.20.20

linuxlinux_kernelMatch2.6.20.21

linuxlinux_kernelMatch2.6.21.5

linuxlinux_kernelMatch2.6.21.6

linuxlinux_kernelMatch2.6.21.7

linuxlinux_kernelMatch2.6.22

linuxlinux_kernelMatch2.6.22.1

linuxlinux_kernelMatch2.6.22.2

linuxlinux_kernelMatch2.6.22.8

linuxlinux_kernelMatch2.6.22.9

linuxlinux_kernelMatch2.6.22.10

linuxlinux_kernelMatch2.6.22.11

linuxlinux_kernelMatch2.6.22.12

linuxlinux_kernelMatch2.6.22.13

linuxlinux_kernelMatch2.6.22.14

linuxlinux_kernelMatch2.6.22.15

linuxlinux_kernelMatch2.6.22.17

linuxlinux_kernelMatch2.6.22.18

linuxlinux_kernelMatch2.6.22.19

linuxlinux_kernelMatch2.6.22.20

linuxlinux_kernelMatch2.6.22.21

linuxlinux_kernelMatch2.6.22.22

linuxlinux_kernelMatch2.6.22_rc1

linuxlinux_kernelMatch2.6.22_rc7

linuxlinux_kernelMatch2.6.23

linuxlinux_kernelMatch2.6.23.8

linuxlinux_kernelMatch2.6.23.9

linuxlinux_kernelMatch2.6.23.10

linuxlinux_kernelMatch2.6.23.11

linuxlinux_kernelMatch2.6.23.12

linuxlinux_kernelMatch2.6.23.13

linuxlinux_kernelMatch2.6.23.15

linuxlinux_kernelMatch2.6.23.16

linuxlinux_kernelMatch2.6.23.17

linuxlinux_kernelMatch2.6.23_rc1

linuxlinux_kernelMatch2.6.24

linuxlinux_kernelMatch2.6.24.1

linuxlinux_kernelMatch2.6.24.2

linuxlinux_kernelMatch2.6.24.3

linuxlinux_kernelMatch2.6.24.4

linuxlinux_kernelMatch2.6.24.5

linuxlinux_kernelMatch2.6.24.6

linuxlinux_kernelMatch2.6.24.7

linuxlinux_kernelMatch2.6.24_rc1

linuxlinux_kernelMatch2.6.24_rc4

linuxlinux_kernelMatch2.6.24_rc5

linuxlinux_kernelMatch2.6.25

linuxlinux_kernelMatch2.6.25x86_64

linuxlinux_kernelMatch2.6.25.1

linuxlinux_kernelMatch2.6.25.1x86_64

linuxlinux_kernelMatch2.6.25.2

linuxlinux_kernelMatch2.6.25.2x86_64

linuxlinux_kernelMatch2.6.25.3

linuxlinux_kernelMatch2.6.25.3x86_64

linuxlinux_kernelMatch2.6.25.4

linuxlinux_kernelMatch2.6.25.4x86_64

linuxlinux_kernelMatch2.6.25.5

linuxlinux_kernelMatch2.6.25.5x86_64

linuxlinux_kernelMatch2.6.25.6

linuxlinux_kernelMatch2.6.25.6x86_64

linuxlinux_kernelMatch2.6.25.7

linuxlinux_kernelMatch2.6.25.7x86_64

linuxlinux_kernelMatch2.6.25.8

linuxlinux_kernelMatch2.6.25.8x86_64

linuxlinux_kernelMatch2.6.25.9

linuxlinux_kernelMatch2.6.25.9x86_64

linuxlinux_kernelMatch2.6.25.10

linuxlinux_kernelMatch2.6.25.10x86_64

linuxlinux_kernelMatch2.6.25.11

linuxlinux_kernelMatch2.6.25.11x86_64

linuxlinux_kernelMatch2.6.25.12

linuxlinux_kernelMatch2.6.25.12x86_64

linuxlinux_kernelMatch2.6.25.13

linuxlinux_kernelMatch2.6.25.14

linuxlinux_kernelMatch2.6.25.15

linuxlinux_kernelMatch2.6.25.16

linuxlinux_kernelMatch2.6.25.17

linuxlinux_kernelMatch2.6.26

linuxlinux_kernelMatch2.6.26.1

linuxlinux_kernelMatch2.6.26.2

linuxlinux_kernelMatch2.6.26.3

linuxlinux_kernelMatch2.6.26.4

linuxlinux_kernelMatch2.6.26.5

linuxlinux_kernelMatch2.6.27

References

git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=d38b7aa7fc3371b52d036748028db50b585ade2e

lists.opensuse.org/opensuse-security-announce/2009-01/msg00006.html

lists.opensuse.org/opensuse-security-announce/2009-01/msg00010.html

openwall.com/lists/oss-security/2008/11/10/1

openwall.com/lists/oss-security/2008/11/10/3

openwall.com/lists/oss-security/2008/11/10/6

openwall.com/lists/oss-security/2008/11/10/7

openwall.com/lists/oss-security/2008/11/11/1

openwall.com/lists/oss-security/2008/11/11/12

osvdb.org/49863

rhn.redhat.com/errata/RHSA-2009-0264.html

secunia.com/advisories/32719

secunia.com/advisories/32918

secunia.com/advisories/32998

secunia.com/advisories/33180

secunia.com/advisories/33556

secunia.com/advisories/33641

secunia.com/advisories/33704

secunia.com/advisories/33858

www.debian.org/security/2008/dsa-1681

www.debian.org/security/2008/dsa-1687

www.mandriva.com/security/advisories?name=MDVSA-2008:246

www.redhat.com/support/errata/RHSA-2009-0014.html

www.securityfocus.com/bid/32289

www.securitytracker.com/id?1021230

www.ubuntu.com/usn/usn-679-1

bugzilla.redhat.com/show_bug.cgi?id=470769

exchange.xforce.ibmcloud.com/vulnerabilities/46605

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10470

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

5.6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

65.0%

JSON

Related for NVD:CVE-2008-5025

ubuntucve2 cve2 prion2 cvelist2 openvas27 nessus16 securityvulns4 seebug1 veracode2 suse3 nvd1 redhat2 centos1 oraclelinux3 debian2 ubuntu1 osv2