Lucene search
HistoryJun 10, 2008 - 12:32 a.m.
CVE-2008-1673
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.9
Confidence
High
EPSS
0.076
Percentile
94.2%
The asn1 implementation in (a) the Linux kernel 2.4 before 2.4.36.6 and 2.6 before 2.6.25.5, as used in the cifs and ip_nat_snmp_basic modules; and (b) the gxsnmp package; does not properly validate length values during decoding of ASN.1 BER data, which allows remote attackers to cause a denial of service (crash) or execute arbitrary code via (1) a length greater than the working buffer, which can lead to an unspecified overflow; (2) an oid length of zero, which can lead to an off-by-one error; or (3) an indefinite length for a primitive encoding.
Affected configurations
Node
debiandebian_linuxMatch4.0
ORdebiandebian_linuxMatch4.0alpha
ORdebiandebian_linuxMatch4.0amd64
ORdebiandebian_linuxMatch4.0arm
ORdebiandebian_linuxMatch4.0hppa
ORdebiandebian_linuxMatch4.0ia-32
ORdebiandebian_linuxMatch4.0ia-64
ORdebiandebian_linuxMatch4.0m68k
ORdebiandebian_linuxMatch4.0mips
ORdebiandebian_linuxMatch4.0mipsel
ORdebiandebian_linuxMatch4.0powerpc
ORdebiandebian_linuxMatch4.0s-390
ORdebiandebian_linuxMatch4.0sparc
ORlinuxlinux_kernelMatch2.4.0
ORlinuxlinux_kernelMatch2.4.0test1
ORlinuxlinux_kernelMatch2.4.0test10
ORlinuxlinux_kernelMatch2.4.0test11
ORlinuxlinux_kernelMatch2.4.0test12
ORlinuxlinux_kernelMatch2.4.0test2
ORlinuxlinux_kernelMatch2.4.0test3
ORlinuxlinux_kernelMatch2.4.0test4
ORlinuxlinux_kernelMatch2.4.0test5
ORlinuxlinux_kernelMatch2.4.0test6
ORlinuxlinux_kernelMatch2.4.0test7
ORlinuxlinux_kernelMatch2.4.0test8
ORlinuxlinux_kernelMatch2.4.0test9
ORlinuxlinux_kernelMatch2.4.1
ORlinuxlinux_kernelMatch2.4.2
ORlinuxlinux_kernelMatch2.4.3
ORlinuxlinux_kernelMatch2.4.4
ORlinuxlinux_kernelMatch2.4.5
ORlinuxlinux_kernelMatch2.4.6
ORlinuxlinux_kernelMatch2.4.7
ORlinuxlinux_kernelMatch2.4.8
ORlinuxlinux_kernelMatch2.4.9
ORlinuxlinux_kernelMatch2.4.10
ORlinuxlinux_kernelMatch2.4.11
ORlinuxlinux_kernelMatch2.4.12
ORlinuxlinux_kernelMatch2.4.13
ORlinuxlinux_kernelMatch2.4.14
ORlinuxlinux_kernelMatch2.4.15
ORlinuxlinux_kernelMatch2.4.16
ORlinuxlinux_kernelMatch2.4.17
ORlinuxlinux_kernelMatch2.4.18
ORlinuxlinux_kernelMatch2.4.18pre1
ORlinuxlinux_kernelMatch2.4.18pre2
ORlinuxlinux_kernelMatch2.4.18pre3
ORlinuxlinux_kernelMatch2.4.18pre4
ORlinuxlinux_kernelMatch2.4.18pre5
ORlinuxlinux_kernelMatch2.4.18pre6
ORlinuxlinux_kernelMatch2.4.18pre7
ORlinuxlinux_kernelMatch2.4.18pre8
ORlinuxlinux_kernelMatch2.4.19
ORlinuxlinux_kernelMatch2.4.19pre1
ORlinuxlinux_kernelMatch2.4.19pre2
ORlinuxlinux_kernelMatch2.4.19pre3
ORlinuxlinux_kernelMatch2.4.19pre4
ORlinuxlinux_kernelMatch2.4.19pre5
ORlinuxlinux_kernelMatch2.4.19pre6
ORlinuxlinux_kernelMatch2.4.20
ORlinuxlinux_kernelMatch2.4.21
ORlinuxlinux_kernelMatch2.4.21pre1
ORlinuxlinux_kernelMatch2.4.21pre4
ORlinuxlinux_kernelMatch2.4.21pre7
ORlinuxlinux_kernelMatch2.4.22
ORlinuxlinux_kernelMatch2.4.23
ORlinuxlinux_kernelMatch2.4.23pre9
ORlinuxlinux_kernelMatch2.4.23_ow2
ORlinuxlinux_kernelMatch2.4.24
ORlinuxlinux_kernelMatch2.4.24_ow1
ORlinuxlinux_kernelMatch2.4.25
ORlinuxlinux_kernelMatch2.4.26
ORlinuxlinux_kernelMatch2.4.27
ORlinuxlinux_kernelMatch2.4.27pre1
ORlinuxlinux_kernelMatch2.4.27pre2
ORlinuxlinux_kernelMatch2.4.27pre3
ORlinuxlinux_kernelMatch2.4.27pre4
ORlinuxlinux_kernelMatch2.4.27pre5
ORlinuxlinux_kernelMatch2.4.28
ORlinuxlinux_kernelMatch2.4.29
ORlinuxlinux_kernelMatch2.4.29rc1
ORlinuxlinux_kernelMatch2.4.29rc2
ORlinuxlinux_kernelMatch2.4.30
ORlinuxlinux_kernelMatch2.4.30rc2
ORlinuxlinux_kernelMatch2.4.30rc3
ORlinuxlinux_kernelMatch2.4.31
ORlinuxlinux_kernelMatch2.4.31pre1
ORlinuxlinux_kernelMatch2.4.32
ORlinuxlinux_kernelMatch2.4.32pre1
ORlinuxlinux_kernelMatch2.4.32pre2
ORlinuxlinux_kernelMatch2.4.33
ORlinuxlinux_kernelMatch2.4.33pre1
ORlinuxlinux_kernelMatch2.4.33.2
ORlinuxlinux_kernelMatch2.4.33.3
ORlinuxlinux_kernelMatch2.4.33.4
ORlinuxlinux_kernelMatch2.4.33.5
ORlinuxlinux_kernelMatch2.4.34
ORlinuxlinux_kernelMatch2.4.35
ORlinuxlinux_kernelMatch2.4.36
ORlinuxlinux_kernelMatch2.4.36.1
ORlinuxlinux_kernelMatch2.4.36.2
ORlinuxlinux_kernelMatch2.4.36.3
ORlinuxlinux_kernelMatch2.4.36.4
ORlinuxlinux_kernelMatch2.4.36.5
ORlinuxlinux_kernelMatch2.6.0
ORlinuxlinux_kernelMatch2.6.0test1
ORlinuxlinux_kernelMatch2.6.0test2
ORlinuxlinux_kernelMatch2.6.0test3
ORlinuxlinux_kernelMatch2.6.0test4
ORlinuxlinux_kernelMatch2.6.0test5
ORlinuxlinux_kernelMatch2.6.0test6
ORlinuxlinux_kernelMatch2.6.0test7
ORlinuxlinux_kernelMatch2.6.0test8
ORlinuxlinux_kernelMatch2.6.0test9
ORlinuxlinux_kernelMatch2.6.1
ORlinuxlinux_kernelMatch2.6.1rc1
ORlinuxlinux_kernelMatch2.6.1rc2
ORlinuxlinux_kernelMatch2.6.2
ORlinuxlinux_kernelMatch2.6.10
ORlinuxlinux_kernelMatch2.6.10rc2
ORlinuxlinux_kernelMatch2.6.11
ORlinuxlinux_kernelMatch2.6.11rc2
ORlinuxlinux_kernelMatch2.6.11rc3
ORlinuxlinux_kernelMatch2.6.11rc4
ORlinuxlinux_kernelMatch2.6.11.4
ORlinuxlinux_kernelMatch2.6.11.5
ORlinuxlinux_kernelMatch2.6.11.6
ORlinuxlinux_kernelMatch2.6.11.7
ORlinuxlinux_kernelMatch2.6.11.8
ORlinuxlinux_kernelMatch2.6.11.11
ORlinuxlinux_kernelMatch2.6.11.12
ORlinuxlinux_kernelMatch2.6.12
ORlinuxlinux_kernelMatch2.6.12rc1
ORlinuxlinux_kernelMatch2.6.12rc4
ORlinuxlinux_kernelMatch2.6.12rc5
ORlinuxlinux_kernelMatch2.6.12.1
ORlinuxlinux_kernelMatch2.6.12.2
ORlinuxlinux_kernelMatch2.6.12.3
ORlinuxlinux_kernelMatch2.6.12.4
ORlinuxlinux_kernelMatch2.6.12.5
ORlinuxlinux_kernelMatch2.6.12.6
ORlinuxlinux_kernelMatch2.6.12.12
ORlinuxlinux_kernelMatch2.6.12.22
ORlinuxlinux_kernelMatch2.6.13
ORlinuxlinux_kernelMatch2.6.13rc1
ORlinuxlinux_kernelMatch2.6.13rc4
ORlinuxlinux_kernelMatch2.6.13rc6
ORlinuxlinux_kernelMatch2.6.13rc7
ORlinuxlinux_kernelMatch2.6.13.1
ORlinuxlinux_kernelMatch2.6.13.2
ORlinuxlinux_kernelMatch2.6.13.3
ORlinuxlinux_kernelMatch2.6.13.4
ORlinuxlinux_kernelMatch2.6.14
ORlinuxlinux_kernelMatch2.6.14rc1
ORlinuxlinux_kernelMatch2.6.14rc2
ORlinuxlinux_kernelMatch2.6.14rc3
ORlinuxlinux_kernelMatch2.6.14rc4
ORlinuxlinux_kernelMatch2.6.14.1
ORlinuxlinux_kernelMatch2.6.14.2
ORlinuxlinux_kernelMatch2.6.14.3
ORlinuxlinux_kernelMatch2.6.14.4
ORlinuxlinux_kernelMatch2.6.14.5
ORlinuxlinux_kernelMatch2.6.15
ORlinuxlinux_kernelMatch2.6.15rc1
ORlinuxlinux_kernelMatch2.6.15rc2
ORlinuxlinux_kernelMatch2.6.15rc3
ORlinuxlinux_kernelMatch2.6.15.1
ORlinuxlinux_kernelMatch2.6.15.2
ORlinuxlinux_kernelMatch2.6.15.3
ORlinuxlinux_kernelMatch2.6.15.4
ORlinuxlinux_kernelMatch2.6.15.5
ORlinuxlinux_kernelMatch2.6.15.11
ORlinuxlinux_kernelMatch2.6.16
ORlinuxlinux_kernelMatch2.6.16rc1
ORlinuxlinux_kernelMatch2.6.16.1
ORlinuxlinux_kernelMatch2.6.16.7
ORlinuxlinux_kernelMatch2.6.16.9
ORlinuxlinux_kernelMatch2.6.16.11
ORlinuxlinux_kernelMatch2.6.16.12
ORlinuxlinux_kernelMatch2.6.16.13
ORlinuxlinux_kernelMatch2.6.16.19
ORlinuxlinux_kernelMatch2.6.16.23
ORlinuxlinux_kernelMatch2.6.16.27
ORlinuxlinux_kernelMatch2.6.17
ORlinuxlinux_kernelMatch2.6.17rc5
ORlinuxlinux_kernelMatch2.6.17.1
ORlinuxlinux_kernelMatch2.6.17.2
ORlinuxlinux_kernelMatch2.6.17.3
ORlinuxlinux_kernelMatch2.6.17.5
ORlinuxlinux_kernelMatch2.6.17.6
ORlinuxlinux_kernelMatch2.6.17.7
ORlinuxlinux_kernelMatch2.6.17.8
ORlinuxlinux_kernelMatch2.6.17.10
ORlinuxlinux_kernelMatch2.6.17.11
ORlinuxlinux_kernelMatch2.6.17.12
ORlinuxlinux_kernelMatch2.6.17.13
ORlinuxlinux_kernelMatch2.6.17.14
ORlinuxlinux_kernelMatch2.6.18
ORlinuxlinux_kernelMatch2.6.18.1
ORlinuxlinux_kernelMatch2.6.18.3
ORlinuxlinux_kernelMatch2.6.18.4
ORlinuxlinux_kernelMatch2.6.19
ORlinuxlinux_kernelMatch2.6.19rc1
ORlinuxlinux_kernelMatch2.6.19rc2
ORlinuxlinux_kernelMatch2.6.19rc3
ORlinuxlinux_kernelMatch2.6.19rc4
ORlinuxlinux_kernelMatch2.6.19.1
ORlinuxlinux_kernelMatch2.6.19.2
ORlinuxlinux_kernelMatch2.6.20
ORlinuxlinux_kernelMatch2.6.20rc2
ORlinuxlinux_kernelMatch2.6.20.1
ORlinuxlinux_kernelMatch2.6.20.2
ORlinuxlinux_kernelMatch2.6.20.3
ORlinuxlinux_kernelMatch2.6.20.4
ORlinuxlinux_kernelMatch2.6.20.5
ORlinuxlinux_kernelMatch2.6.20.8
ORlinuxlinux_kernelMatch2.6.20.9
ORlinuxlinux_kernelMatch2.6.20.11
ORlinuxlinux_kernelMatch2.6.20.13
ORlinuxlinux_kernelMatch2.6.20.15
ORlinuxlinux_kernelMatch2.6.21
ORlinuxlinux_kernelMatch2.6.21rc3
ORlinuxlinux_kernelMatch2.6.21rc4
ORlinuxlinux_kernelMatch2.6.21rc5
ORlinuxlinux_kernelMatch2.6.21rc6
ORlinuxlinux_kernelMatch2.6.21.1
ORlinuxlinux_kernelMatch2.6.21.2
ORlinuxlinux_kernelMatch2.6.21.6
ORlinuxlinux_kernelMatch2.6.21.7
ORlinuxlinux_kernelMatch2.6.22
ORlinuxlinux_kernelMatch2.6.22.1
ORlinuxlinux_kernelMatch2.6.22.3
ORlinuxlinux_kernelMatch2.6.22.4
ORlinuxlinux_kernelMatch2.6.22.5
ORlinuxlinux_kernelMatch2.6.22.6
ORlinuxlinux_kernelMatch2.6.22.7
ORlinuxlinux_kernelMatch2.6.22.8
ORlinuxlinux_kernelMatch2.6.22.11
ORlinuxlinux_kernelMatch2.6.22.12
ORlinuxlinux_kernelMatch2.6.22.13
ORlinuxlinux_kernelMatch2.6.22.14
ORlinuxlinux_kernelMatch2.6.22.15
ORlinuxlinux_kernelMatch2.6.22.16
ORlinuxlinux_kernelMatch2.6.22.17
ORlinuxlinux_kernelMatch2.6.22_rc1
ORlinuxlinux_kernelMatch2.6.22_rc7
ORlinuxlinux_kernelMatch2.6.23
ORlinuxlinux_kernelMatch2.6.23rc1
ORlinuxlinux_kernelMatch2.6.23rc2
ORlinuxlinux_kernelMatch2.6.23.1
ORlinuxlinux_kernelMatch2.6.23.2
ORlinuxlinux_kernelMatch2.6.23.3
ORlinuxlinux_kernelMatch2.6.23.4
ORlinuxlinux_kernelMatch2.6.23.5
ORlinuxlinux_kernelMatch2.6.23.6
ORlinuxlinux_kernelMatch2.6.23.7
ORlinuxlinux_kernelMatch2.6.23.9
ORlinuxlinux_kernelMatch2.6.23.10
ORlinuxlinux_kernelMatch2.6.23.14
ORlinuxlinux_kernelMatch2.6.24rc2
ORlinuxlinux_kernelMatch2.6.24rc3
ORlinuxlinux_kernelMatch2.6.24.1
ORlinuxlinux_kernelMatch2.6.24.2
ORlinuxlinux_kernelMatch2.6.24.6
ORlinuxlinux_kernelMatch2.6.24_rc1
ORlinuxlinux_kernelMatch2.6.25
ORlinuxlinux_kernelMatch2.6.25.1
ORlinuxlinux_kernelMatch2.6.25.2
ORlinuxlinux_kernelMatch2.6.25.3
ORlinuxlinux_kernelMatch2.6.25.4
ORlinuxlinux_kernelMatch2.6_test9_cvs
| Vendor | Product | Version | CPE |
|---|---|---|---|
| debian | debian_linux | 4.0 | cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:* |
| debian | debian_linux | 4.0 | cpe:2.3:o:debian:debian_linux:4.0:*:alpha:*:*:*:*:* |
| debian | debian_linux | 4.0 | cpe:2.3:o:debian:debian_linux:4.0:*:amd64:*:*:*:*:* |
| debian | debian_linux | 4.0 | cpe:2.3:o:debian:debian_linux:4.0:*:arm:*:*:*:*:* |
| debian | debian_linux | 4.0 | cpe:2.3:o:debian:debian_linux:4.0:*:hppa:*:*:*:*:* |
| debian | debian_linux | 4.0 | cpe:2.3:o:debian:debian_linux:4.0:*:ia-32:*:*:*:*:* |
| debian | debian_linux | 4.0 | cpe:2.3:o:debian:debian_linux:4.0:*:ia-64:*:*:*:*:* |
| debian | debian_linux | 4.0 | cpe:2.3:o:debian:debian_linux:4.0:*:m68k:*:*:*:*:* |
| debian | debian_linux | 4.0 | cpe:2.3:o:debian:debian_linux:4.0:*:mips:*:*:*:*:* |
| debian | debian_linux | 4.0 | cpe:2.3:o:debian:debian_linux:4.0:*:mipsel:*:*:*:*:* |
References
git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git%3Ba=commit%3Bh=33afb8403f361919aa5c8fe1d0a4f5ddbfbbea3c
git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ddb2c43594f22843e9f3153da151deaba1a834c5
kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.6
kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.5
lists.opensuse.org/opensuse-security-announce/2008-07/msg00007.html
lists.opensuse.org/opensuse-security-announce/2008-07/msg00012.html
lists.opensuse.org/opensuse-security-announce/2008-10/msg00000.html
lists.opensuse.org/opensuse-security-announce/2008-10/msg00001.html
lists.opensuse.org/opensuse-security-announce/2008-10/msg00003.html
lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html
lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html
secunia.com/advisories/30000
secunia.com/advisories/30580
secunia.com/advisories/30644
secunia.com/advisories/30658
secunia.com/advisories/30982
secunia.com/advisories/31107
secunia.com/advisories/31836
secunia.com/advisories/32103
secunia.com/advisories/32104
secunia.com/advisories/32370
secunia.com/advisories/32759
wiki.rpath.com/wiki/Advisories:rPSA-2008-0189
www.debian.org/security/2008/dsa-1592
www.mandriva.com/security/advisories?name=MDVSA-2008:113
www.mandriva.com/security/advisories?name=MDVSA-2008:174
www.securityfocus.com/archive/1/493300/100/0/threaded
www.securityfocus.com/bid/29589
www.securitytracker.com/id?1020210
www.ubuntu.com/usn/usn-625-1
www.vupen.com/english/advisories/2008/1770
bugzilla.redhat.com/show_bug.cgi?id=443962
exchange.xforce.ibmcloud.com/vulnerabilities/42921
www.redhat.com/archives/fedora-package-announce/2008-June/msg00587.html
Related
nessus
nessus
Mandriva Linux Security Advisory : kernel (MDVSA-2008:113)
2009-04-23 00:00:00
Fedora 9 : kernel-2.6.25.6-55.fc9 (2008-5308)
2008-06-16 00:00:00
Fedora 8 : kernel-2.6.25.6-27.fc8 (2008-5454)
2008-06-24 00:00:00
openvas
openvas
Fedora Update for kernel FEDORA-2008-5308
2009-02-17 00:00:00
Mandriva Update for kernel MDVSA-2008:113 (kernel)
2009-04-09 00:00:00
Mandriva Update for kernel MDVSA-2008:113 (kernel)
2009-04-09 00:00:00
cve
cve
CVE-2008-1673
2008-06-10 00:32:00
seebug
seebug
Linux Kernel BER解码缓冲区溢出漏洞
2008-06-11 00:00:00
Linux Kernel BER Decoding Remote Buffer Overflow Vulnerability
2008-08-22 00:00:00
ubuntucve
ubuntucve
CVE-2008-1673
2008-06-10 00:00:00
prion
prion
Design/Logic Flaw
2008-06-10 00:32:00
cvelist
cvelist
CVE-2008-1673
2008-06-10 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 1592-1] New Linux 2.6.18 packages fix overflow conditions
2008-06-09 00:00:00
Linux kernel multiple security vulnerabilities
2008-06-09 00:00:00
debian
debian
[SECURITY] [DSA 1592-1] New Linux 2.6.18 packages fix overflow conditions
2008-06-09 06:37:30
[SECURITY] [DSA 1592-2] New Linux 2.6.18 packages fix overflow conditions
2008-06-09 17:15:28
osv
osv
linux-2.6 - overflow conditions
2008-06-09 00:00:00
fedora
fedora
[SECURITY] Fedora 8 Update: kernel-2.6.25.6-27.fc8
2008-06-20 19:05:23
suse
suse
remote denial of service in kernel
2008-10-01 17:25:47
remote denial of service in kernel
2008-09-11 13:24:55
remote denial of service in kernel
2008-07-29 17:28:49
oraclelinux
oraclelinux
kernel security and bug fix update
2008-06-26 00:00:00
kernel security and bug fix update
2008-06-26 00:00:00
kernel security and bug fix update
2008-12-18 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2008-07-15 00:00:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.9
Confidence
High
EPSS
0.076
Percentile
94.2%
Related for NVD:CVE-2008-1673