Lucene search

[email protected]NVD:CVE-2008-3915

HistorySep 11, 2008 - 1:13 a.m.

CVE-2008-3915

2008-09-1101:13:41

CWE-119

[email protected]

web.nvd.nist.gov

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

5.4

Confidence

High

EPSS

0.665

Percentile

97.9%

JSON

Buffer overflow in nfsd in the Linux kernel before 2.6.26.4, when NFSv4 is enabled, allows remote attackers to have an unknown impact via vectors related to decoding an NFSv4 acl.

Affected configurations

Nvd

Node

linuxlinux_kernelMatch2.6.18

linuxlinux_kernelMatch2.6.19.4

linuxlinux_kernelMatch2.6.19.5

linuxlinux_kernelMatch2.6.19.7

linuxlinux_kernelMatch2.6.20.16

linuxlinux_kernelMatch2.6.20.17

linuxlinux_kernelMatch2.6.20.18

linuxlinux_kernelMatch2.6.20.19

linuxlinux_kernelMatch2.6.20.20

linuxlinux_kernelMatch2.6.20.21

linuxlinux_kernelMatch2.6.21.5

linuxlinux_kernelMatch2.6.21.6

linuxlinux_kernelMatch2.6.21.7

linuxlinux_kernelMatch2.6.22

linuxlinux_kernelMatch2.6.22.2

linuxlinux_kernelMatch2.6.22.8

linuxlinux_kernelMatch2.6.22.9

linuxlinux_kernelMatch2.6.22.10

linuxlinux_kernelMatch2.6.22.11

linuxlinux_kernelMatch2.6.22.12

linuxlinux_kernelMatch2.6.22.13

linuxlinux_kernelMatch2.6.22.14

linuxlinux_kernelMatch2.6.22.15

linuxlinux_kernelMatch2.6.22.17

linuxlinux_kernelMatch2.6.22.18

linuxlinux_kernelMatch2.6.22.19

linuxlinux_kernelMatch2.6.22.20

linuxlinux_kernelMatch2.6.22.21

linuxlinux_kernelMatch2.6.22.22

linuxlinux_kernelMatch2.6.23

linuxlinux_kernelMatch2.6.23.8

linuxlinux_kernelMatch2.6.23.9

linuxlinux_kernelMatch2.6.23.10

linuxlinux_kernelMatch2.6.23.11

linuxlinux_kernelMatch2.6.23.12

linuxlinux_kernelMatch2.6.23.13

linuxlinux_kernelMatch2.6.23.15

linuxlinux_kernelMatch2.6.23.16

linuxlinux_kernelMatch2.6.23.17

linuxlinux_kernelMatch2.6.24

linuxlinux_kernelMatch2.6.24.1

linuxlinux_kernelMatch2.6.24.2

linuxlinux_kernelMatch2.6.24.3

linuxlinux_kernelMatch2.6.24.4

linuxlinux_kernelMatch2.6.24.5

linuxlinux_kernelMatch2.6.24.6

linuxlinux_kernelMatch2.6.24.7

linuxlinux_kernelMatch2.6.25

linuxlinux_kernelMatch2.6.25.1

linuxlinux_kernelMatch2.6.25.2

linuxlinux_kernelMatch2.6.25.3

linuxlinux_kernelMatch2.6.25.4

linuxlinux_kernelMatch2.6.25.5

linuxlinux_kernelMatch2.6.25.6

linuxlinux_kernelMatch2.6.25.7

linuxlinux_kernelMatch2.6.25.8

linuxlinux_kernelMatch2.6.25.9

linuxlinux_kernelMatch2.6.25.10

linuxlinux_kernelMatch2.6.25.11

linuxlinux_kernelMatch2.6.25.12

linuxlinux_kernelMatch2.6.25.13

linuxlinux_kernelMatch2.6.25.14

linuxlinux_kernelMatch2.6.25.15

References

git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=91b80969ba466ba4b915a4a1d03add8c297add3f

lkml.org/lkml/2008/9/3/286

secunia.com/advisories/31881

secunia.com/advisories/32190

secunia.com/advisories/32393

www.debian.org/security/2008/dsa-1636

www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26.4

www.openwall.com/lists/oss-security/2008/09/04/18

www.openwall.com/lists/oss-security/2008/09/04/4

www.redhat.com/support/errata/RHSA-2008-0857.html

www.securityfocus.com/bid/31133

www.ubuntu.com/usn/usn-659-1

bugzilla.redhat.com/show_bug.cgi?id=461101

exchange.xforce.ibmcloud.com/vulnerabilities/45055

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

5.4

Confidence

High

EPSS

0.665

Percentile

97.9%

JSON

Related for NVD:CVE-2008-3915

checkpoint_advisories1 veracode1 cve1 seebug1 ubuntucve1 prion1 cvelist1 securityvulns2 debian1 openvas4 osv1 nessus2 redhat1 ubuntu1