Lucene search
RedhatCVE-2008-1673HistoryJun 10, 2008 - 12:32 a.m.
CVE-2008-1673
2008-06-1000:32:00
CWE-119
redhat
web.nvd.nist.gov
77
cve
2008
1673
linux kernel
asn.1
implementation
vulnerability
remote code execution
denial of service
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.8
Confidence
High
EPSS
0.076
Percentile
94.2%
The asn1 implementation in (a) the Linux kernel 2.4 before 2.4.36.6 and 2.6 before 2.6.25.5, as used in the cifs and ip_nat_snmp_basic modules; and (b) the gxsnmp package; does not properly validate length values during decoding of ASN.1 BER data, which allows remote attackers to cause a denial of service (crash) or execute arbitrary code via (1) a length greater than the working buffer, which can lead to an unspecified overflow; (2) an oid length of zero, which can lead to an off-by-one error; or (3) an indefinite length for a primitive encoding.
Affected configurations
Node
debiandebian_linuxMatch4.0
ORdebiandebian_linuxMatch4.0alpha
ORdebiandebian_linuxMatch4.0amd64
ORdebiandebian_linuxMatch4.0arm
ORdebiandebian_linuxMatch4.0hppa
ORdebiandebian_linuxMatch4.0ia-32
ORdebiandebian_linuxMatch4.0ia-64
ORdebiandebian_linuxMatch4.0m68k
ORdebiandebian_linuxMatch4.0mips
ORdebiandebian_linuxMatch4.0mipsel
ORdebiandebian_linuxMatch4.0powerpc
ORdebiandebian_linuxMatch4.0s-390
ORdebiandebian_linuxMatch4.0sparc
ORlinuxlinux_kernelMatch2.4.0
ORlinuxlinux_kernelMatch2.4.0test1
ORlinuxlinux_kernelMatch2.4.0test10
ORlinuxlinux_kernelMatch2.4.0test11
ORlinuxlinux_kernelMatch2.4.0test12
ORlinuxlinux_kernelMatch2.4.0test2
ORlinuxlinux_kernelMatch2.4.0test3
ORlinuxlinux_kernelMatch2.4.0test4
ORlinuxlinux_kernelMatch2.4.0test5
ORlinuxlinux_kernelMatch2.4.0test6
ORlinuxlinux_kernelMatch2.4.0test7
ORlinuxlinux_kernelMatch2.4.0test8
ORlinuxlinux_kernelMatch2.4.0test9
ORlinuxlinux_kernelMatch2.4.1
ORlinuxlinux_kernelMatch2.4.2
ORlinuxlinux_kernelMatch2.4.3
ORlinuxlinux_kernelMatch2.4.4
ORlinuxlinux_kernelMatch2.4.5
ORlinuxlinux_kernelMatch2.4.6
ORlinuxlinux_kernelMatch2.4.7
ORlinuxlinux_kernelMatch2.4.8
ORlinuxlinux_kernelMatch2.4.9
ORlinuxlinux_kernelMatch2.4.10
ORlinuxlinux_kernelMatch2.4.11
ORlinuxlinux_kernelMatch2.4.12
ORlinuxlinux_kernelMatch2.4.13
ORlinuxlinux_kernelMatch2.4.14
ORlinuxlinux_kernelMatch2.4.15
ORlinuxlinux_kernelMatch2.4.16
ORlinuxlinux_kernelMatch2.4.17
ORlinuxlinux_kernelMatch2.4.18
ORlinuxlinux_kernelMatch2.4.18pre1
ORlinuxlinux_kernelMatch2.4.18pre2
ORlinuxlinux_kernelMatch2.4.18pre3
ORlinuxlinux_kernelMatch2.4.18pre4
ORlinuxlinux_kernelMatch2.4.18pre5
ORlinuxlinux_kernelMatch2.4.18pre6
ORlinuxlinux_kernelMatch2.4.18pre7
ORlinuxlinux_kernelMatch2.4.18pre8
ORlinuxlinux_kernelMatch2.4.19
ORlinuxlinux_kernelMatch2.4.19pre1
ORlinuxlinux_kernelMatch2.4.19pre2
ORlinuxlinux_kernelMatch2.4.19pre3
ORlinuxlinux_kernelMatch2.4.19pre4
ORlinuxlinux_kernelMatch2.4.19pre5
ORlinuxlinux_kernelMatch2.4.19pre6
ORlinuxlinux_kernelMatch2.4.20
ORlinuxlinux_kernelMatch2.4.21
ORlinuxlinux_kernelMatch2.4.21pre1
ORlinuxlinux_kernelMatch2.4.21pre4
ORlinuxlinux_kernelMatch2.4.21pre7
ORlinuxlinux_kernelMatch2.4.22
ORlinuxlinux_kernelMatch2.4.23
ORlinuxlinux_kernelMatch2.4.23pre9
ORlinuxlinux_kernelMatch2.4.23_ow2
ORlinuxlinux_kernelMatch2.4.24
ORlinuxlinux_kernelMatch2.4.24_ow1
ORlinuxlinux_kernelMatch2.4.25
ORlinuxlinux_kernelMatch2.4.26
ORlinuxlinux_kernelMatch2.4.27
ORlinuxlinux_kernelMatch2.4.27pre1
ORlinuxlinux_kernelMatch2.4.27pre2
ORlinuxlinux_kernelMatch2.4.27pre3
ORlinuxlinux_kernelMatch2.4.27pre4
ORlinuxlinux_kernelMatch2.4.27pre5
ORlinuxlinux_kernelMatch2.4.28
ORlinuxlinux_kernelMatch2.4.29
ORlinuxlinux_kernelMatch2.4.29rc1
ORlinuxlinux_kernelMatch2.4.29rc2
ORlinuxlinux_kernelMatch2.4.30
ORlinuxlinux_kernelMatch2.4.30rc2
ORlinuxlinux_kernelMatch2.4.30rc3
ORlinuxlinux_kernelMatch2.4.31
ORlinuxlinux_kernelMatch2.4.31pre1
ORlinuxlinux_kernelMatch2.4.32
ORlinuxlinux_kernelMatch2.4.32pre1
ORlinuxlinux_kernelMatch2.4.32pre2
ORlinuxlinux_kernelMatch2.4.33
ORlinuxlinux_kernelMatch2.4.33pre1
ORlinuxlinux_kernelMatch2.4.33.2
ORlinuxlinux_kernelMatch2.4.33.3
ORlinuxlinux_kernelMatch2.4.33.4
ORlinuxlinux_kernelMatch2.4.33.5
ORlinuxlinux_kernelMatch2.4.34
ORlinuxlinux_kernelMatch2.4.35
ORlinuxlinux_kernelMatch2.4.36
ORlinuxlinux_kernelMatch2.4.36.1
ORlinuxlinux_kernelMatch2.4.36.2
ORlinuxlinux_kernelMatch2.4.36.3
ORlinuxlinux_kernelMatch2.4.36.4
ORlinuxlinux_kernelMatch2.4.36.5
ORlinuxlinux_kernelMatch2.6.0
ORlinuxlinux_kernelMatch2.6.0test1
ORlinuxlinux_kernelMatch2.6.0test2
ORlinuxlinux_kernelMatch2.6.0test3
ORlinuxlinux_kernelMatch2.6.0test4
ORlinuxlinux_kernelMatch2.6.0test5
ORlinuxlinux_kernelMatch2.6.0test6
ORlinuxlinux_kernelMatch2.6.0test7
ORlinuxlinux_kernelMatch2.6.0test8
ORlinuxlinux_kernelMatch2.6.0test9
ORlinuxlinux_kernelMatch2.6.1
ORlinuxlinux_kernelMatch2.6.1rc1
ORlinuxlinux_kernelMatch2.6.1rc2
ORlinuxlinux_kernelMatch2.6.2
ORlinuxlinux_kernelMatch2.6.10
ORlinuxlinux_kernelMatch2.6.10rc2
ORlinuxlinux_kernelMatch2.6.11
ORlinuxlinux_kernelMatch2.6.11rc2
ORlinuxlinux_kernelMatch2.6.11rc3
ORlinuxlinux_kernelMatch2.6.11rc4
ORlinuxlinux_kernelMatch2.6.11.4
ORlinuxlinux_kernelMatch2.6.11.5
ORlinuxlinux_kernelMatch2.6.11.6
ORlinuxlinux_kernelMatch2.6.11.7
ORlinuxlinux_kernelMatch2.6.11.8
ORlinuxlinux_kernelMatch2.6.11.11
ORlinuxlinux_kernelMatch2.6.11.12
ORlinuxlinux_kernelMatch2.6.12
ORlinuxlinux_kernelMatch2.6.12rc1
ORlinuxlinux_kernelMatch2.6.12rc4
ORlinuxlinux_kernelMatch2.6.12rc5
ORlinuxlinux_kernelMatch2.6.12.1
ORlinuxlinux_kernelMatch2.6.12.2
ORlinuxlinux_kernelMatch2.6.12.3
ORlinuxlinux_kernelMatch2.6.12.4
ORlinuxlinux_kernelMatch2.6.12.5
ORlinuxlinux_kernelMatch2.6.12.6
ORlinuxlinux_kernelMatch2.6.12.12
ORlinuxlinux_kernelMatch2.6.12.22
ORlinuxlinux_kernelMatch2.6.13
ORlinuxlinux_kernelMatch2.6.13rc1
ORlinuxlinux_kernelMatch2.6.13rc4
ORlinuxlinux_kernelMatch2.6.13rc6
ORlinuxlinux_kernelMatch2.6.13rc7
ORlinuxlinux_kernelMatch2.6.13.1
ORlinuxlinux_kernelMatch2.6.13.2
ORlinuxlinux_kernelMatch2.6.13.3
ORlinuxlinux_kernelMatch2.6.13.4
ORlinuxlinux_kernelMatch2.6.14
ORlinuxlinux_kernelMatch2.6.14rc1
ORlinuxlinux_kernelMatch2.6.14rc2
ORlinuxlinux_kernelMatch2.6.14rc3
ORlinuxlinux_kernelMatch2.6.14rc4
ORlinuxlinux_kernelMatch2.6.14.1
ORlinuxlinux_kernelMatch2.6.14.2
ORlinuxlinux_kernelMatch2.6.14.3
ORlinuxlinux_kernelMatch2.6.14.4
ORlinuxlinux_kernelMatch2.6.14.5
ORlinuxlinux_kernelMatch2.6.15
ORlinuxlinux_kernelMatch2.6.15rc1
ORlinuxlinux_kernelMatch2.6.15rc2
ORlinuxlinux_kernelMatch2.6.15rc3
ORlinuxlinux_kernelMatch2.6.15.1
ORlinuxlinux_kernelMatch2.6.15.2
ORlinuxlinux_kernelMatch2.6.15.3
ORlinuxlinux_kernelMatch2.6.15.4
ORlinuxlinux_kernelMatch2.6.15.5
ORlinuxlinux_kernelMatch2.6.15.11
ORlinuxlinux_kernelMatch2.6.16
ORlinuxlinux_kernelMatch2.6.16rc1
ORlinuxlinux_kernelMatch2.6.16.1
ORlinuxlinux_kernelMatch2.6.16.7
ORlinuxlinux_kernelMatch2.6.16.9
ORlinuxlinux_kernelMatch2.6.16.11
ORlinuxlinux_kernelMatch2.6.16.12
ORlinuxlinux_kernelMatch2.6.16.13
ORlinuxlinux_kernelMatch2.6.16.19
ORlinuxlinux_kernelMatch2.6.16.23
ORlinuxlinux_kernelMatch2.6.16.27
ORlinuxlinux_kernelMatch2.6.17
ORlinuxlinux_kernelMatch2.6.17rc5
ORlinuxlinux_kernelMatch2.6.17.1
ORlinuxlinux_kernelMatch2.6.17.2
ORlinuxlinux_kernelMatch2.6.17.3
ORlinuxlinux_kernelMatch2.6.17.5
ORlinuxlinux_kernelMatch2.6.17.6
ORlinuxlinux_kernelMatch2.6.17.7
ORlinuxlinux_kernelMatch2.6.17.8
ORlinuxlinux_kernelMatch2.6.17.10
ORlinuxlinux_kernelMatch2.6.17.11
ORlinuxlinux_kernelMatch2.6.17.12
ORlinuxlinux_kernelMatch2.6.17.13
ORlinuxlinux_kernelMatch2.6.17.14
ORlinuxlinux_kernelMatch2.6.18
ORlinuxlinux_kernelMatch2.6.18.1
ORlinuxlinux_kernelMatch2.6.18.3
ORlinuxlinux_kernelMatch2.6.18.4
ORlinuxlinux_kernelMatch2.6.19
ORlinuxlinux_kernelMatch2.6.19rc1
ORlinuxlinux_kernelMatch2.6.19rc2
ORlinuxlinux_kernelMatch2.6.19rc3
ORlinuxlinux_kernelMatch2.6.19rc4
ORlinuxlinux_kernelMatch2.6.19.1
ORlinuxlinux_kernelMatch2.6.19.2
ORlinuxlinux_kernelMatch2.6.20
ORlinuxlinux_kernelMatch2.6.20rc2
ORlinuxlinux_kernelMatch2.6.20.1
ORlinuxlinux_kernelMatch2.6.20.2
ORlinuxlinux_kernelMatch2.6.20.3
ORlinuxlinux_kernelMatch2.6.20.4
ORlinuxlinux_kernelMatch2.6.20.5
ORlinuxlinux_kernelMatch2.6.20.8
ORlinuxlinux_kernelMatch2.6.20.9
ORlinuxlinux_kernelMatch2.6.20.11
ORlinuxlinux_kernelMatch2.6.20.13
ORlinuxlinux_kernelMatch2.6.20.15
ORlinuxlinux_kernelMatch2.6.21
ORlinuxlinux_kernelMatch2.6.21rc3
ORlinuxlinux_kernelMatch2.6.21rc4
ORlinuxlinux_kernelMatch2.6.21rc5
ORlinuxlinux_kernelMatch2.6.21rc6
ORlinuxlinux_kernelMatch2.6.21.1
ORlinuxlinux_kernelMatch2.6.21.2
ORlinuxlinux_kernelMatch2.6.21.6
ORlinuxlinux_kernelMatch2.6.21.7
ORlinuxlinux_kernelMatch2.6.22
ORlinuxlinux_kernelMatch2.6.22.1
ORlinuxlinux_kernelMatch2.6.22.3
ORlinuxlinux_kernelMatch2.6.22.4
ORlinuxlinux_kernelMatch2.6.22.5
ORlinuxlinux_kernelMatch2.6.22.6
ORlinuxlinux_kernelMatch2.6.22.7
ORlinuxlinux_kernelMatch2.6.22.8
ORlinuxlinux_kernelMatch2.6.22.11
ORlinuxlinux_kernelMatch2.6.22.12
ORlinuxlinux_kernelMatch2.6.22.13
ORlinuxlinux_kernelMatch2.6.22.14
ORlinuxlinux_kernelMatch2.6.22.15
ORlinuxlinux_kernelMatch2.6.22.16
ORlinuxlinux_kernelMatch2.6.22.17
ORlinuxlinux_kernelMatch2.6.22_rc1
ORlinuxlinux_kernelMatch2.6.22_rc7
ORlinuxlinux_kernelMatch2.6.23
ORlinuxlinux_kernelMatch2.6.23rc1
ORlinuxlinux_kernelMatch2.6.23rc2
ORlinuxlinux_kernelMatch2.6.23.1
ORlinuxlinux_kernelMatch2.6.23.2
ORlinuxlinux_kernelMatch2.6.23.3
ORlinuxlinux_kernelMatch2.6.23.4
ORlinuxlinux_kernelMatch2.6.23.5
ORlinuxlinux_kernelMatch2.6.23.6
ORlinuxlinux_kernelMatch2.6.23.7
ORlinuxlinux_kernelMatch2.6.23.9
ORlinuxlinux_kernelMatch2.6.23.10
ORlinuxlinux_kernelMatch2.6.23.14
ORlinuxlinux_kernelMatch2.6.24rc2
ORlinuxlinux_kernelMatch2.6.24rc3
ORlinuxlinux_kernelMatch2.6.24.1
ORlinuxlinux_kernelMatch2.6.24.2
ORlinuxlinux_kernelMatch2.6.24.6
ORlinuxlinux_kernelMatch2.6.24_rc1
ORlinuxlinux_kernelMatch2.6.25
ORlinuxlinux_kernelMatch2.6.25.1
ORlinuxlinux_kernelMatch2.6.25.2
ORlinuxlinux_kernelMatch2.6.25.3
ORlinuxlinux_kernelMatch2.6.25.4
ORlinuxlinux_kernelMatch2.6_test9_cvs
| Vendor | Product | Version | CPE |
|---|---|---|---|
| debian | debian_linux | 4.0 | cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:* |
| debian | debian_linux | 4.0 | cpe:2.3:o:debian:debian_linux:4.0:*:alpha:*:*:*:*:* |
| debian | debian_linux | 4.0 | cpe:2.3:o:debian:debian_linux:4.0:*:amd64:*:*:*:*:* |
| debian | debian_linux | 4.0 | cpe:2.3:o:debian:debian_linux:4.0:*:arm:*:*:*:*:* |
| debian | debian_linux | 4.0 | cpe:2.3:o:debian:debian_linux:4.0:*:hppa:*:*:*:*:* |
| debian | debian_linux | 4.0 | cpe:2.3:o:debian:debian_linux:4.0:*:ia-32:*:*:*:*:* |
| debian | debian_linux | 4.0 | cpe:2.3:o:debian:debian_linux:4.0:*:ia-64:*:*:*:*:* |
| debian | debian_linux | 4.0 | cpe:2.3:o:debian:debian_linux:4.0:*:m68k:*:*:*:*:* |
| debian | debian_linux | 4.0 | cpe:2.3:o:debian:debian_linux:4.0:*:mips:*:*:*:*:* |
| debian | debian_linux | 4.0 | cpe:2.3:o:debian:debian_linux:4.0:*:mipsel:*:*:*:*:* |
References
git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git%3Ba=commit%3Bh=33afb8403f361919aa5c8fe1d0a4f5ddbfbbea3c
git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ddb2c43594f22843e9f3153da151deaba1a834c5
kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.6
kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.5
lists.opensuse.org/opensuse-security-announce/2008-07/msg00007.html
lists.opensuse.org/opensuse-security-announce/2008-07/msg00012.html
lists.opensuse.org/opensuse-security-announce/2008-10/msg00000.html
lists.opensuse.org/opensuse-security-announce/2008-10/msg00001.html
lists.opensuse.org/opensuse-security-announce/2008-10/msg00003.html
lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html
lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html
secunia.com/advisories/30000
secunia.com/advisories/30580
secunia.com/advisories/30644
secunia.com/advisories/30658
secunia.com/advisories/30982
secunia.com/advisories/31107
secunia.com/advisories/31836
secunia.com/advisories/32103
secunia.com/advisories/32104
secunia.com/advisories/32370
secunia.com/advisories/32759
wiki.rpath.com/wiki/Advisories:rPSA-2008-0189
www.debian.org/security/2008/dsa-1592
www.mandriva.com/security/advisories?name=MDVSA-2008:113
www.mandriva.com/security/advisories?name=MDVSA-2008:174
www.securityfocus.com/archive/1/493300/100/0/threaded
www.securityfocus.com/bid/29589
www.securitytracker.com/id?1020210
www.ubuntu.com/usn/usn-625-1
www.vupen.com/english/advisories/2008/1770
bugzilla.redhat.com/show_bug.cgi?id=443962
exchange.xforce.ibmcloud.com/vulnerabilities/42921
www.redhat.com/archives/fedora-package-announce/2008-June/msg00587.html
Related
nessus
nessus
Mandriva Linux Security Advisory : kernel (MDVSA-2008:113)
2009-04-23 00:00:00
Fedora 9 : kernel-2.6.25.6-55.fc9 (2008-5308)
2008-06-16 00:00:00
Fedora 8 : kernel-2.6.25.6-27.fc8 (2008-5454)
2008-06-24 00:00:00
openvas
openvas
Fedora Update for kernel FEDORA-2008-5308
2009-02-17 00:00:00
Mandriva Update for kernel MDVSA-2008:113 (kernel)
2009-04-09 00:00:00
Mandriva Update for kernel MDVSA-2008:113 (kernel)
2009-04-09 00:00:00
seebug
seebug
Linux Kernel BER Decoding Remote Buffer Overflow Vulnerability
2008-08-22 00:00:00
Linux Kernel BER解码缓冲区溢出漏洞
2008-06-11 00:00:00
prion
prion
Design/Logic Flaw
2008-06-10 00:32:00
nvd
nvd
CVE-2008-1673
2008-06-10 00:32:00
ubuntucve
ubuntucve
CVE-2008-1673
2008-06-10 00:00:00
cvelist
cvelist
CVE-2008-1673
2008-06-10 00:00:00
debian
debian
[SECURITY] [DSA 1592-2] New Linux 2.6.18 packages fix overflow conditions
2008-06-09 17:15:28
[SECURITY] [DSA 1592-1] New Linux 2.6.18 packages fix overflow conditions
2008-06-09 06:37:30
securityvulns
securityvulns
[SECURITY] [DSA 1592-1] New Linux 2.6.18 packages fix overflow conditions
2008-06-09 00:00:00
Linux kernel multiple security vulnerabilities
2008-06-09 00:00:00
osv
osv
linux-2.6 - overflow conditions
2008-06-09 00:00:00
fedora
fedora
[SECURITY] Fedora 8 Update: kernel-2.6.25.6-27.fc8
2008-06-20 19:05:23
oraclelinux
oraclelinux
kernel security and bug fix update
2008-06-26 00:00:00
kernel security and bug fix update
2008-06-26 00:00:00
kernel security and bug fix update
2008-12-18 00:00:00
suse
suse
remote denial of service in kernel
2008-10-01 17:25:47
remote denial of service in kernel
2008-09-11 13:24:55
remote denial of service in kernel
2008-07-21 10:42:10
ubuntu
ubuntu
Linux kernel vulnerabilities
2008-07-15 00:00:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.8
Confidence
High
EPSS
0.076
Percentile
94.2%
Related for CVE-2008-1673