Linux kernel vulnerabilities

2008-11-0500:00:00

ubuntu.com

linux kernel

ubuntu 8.10

denial of service

filesystems

cve-2008-3528

ndiswrapper

wireless network

arbitrary code

root privileges

CVSS2

8.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:C/I:C/A:C

AI Score

Confidence

High

EPSS

0.055

Percentile

93.3%

JSON

Releases

Ubuntu 8.10

Packages

linux -

Details

It was discovered that the Linux kernel could be made to hang temporarily
when mounting corrupted ext2/3 filesystems. If a user were tricked into
mounting a specially crafted filesystem, a remote attacker could cause
system hangs, leading to a denial of service. (CVE-2008-3528)

Anders Kaseorg discovered that ndiswrapper did not correctly handle long
ESSIDs. For a system using ndiswrapper, a physically near-by attacker
could generate specially crafted wireless network traffic and execute
arbitrary code with root privileges. (CVE-2008-4395)

OSVersionArchitecturePackageVersionFilename
Ubuntu8.10noarchlinux-image-2.6.27-7-virtual< 2.6.27-7.16UNKNOWN
Ubuntu8.10noarchacpi-modules-2.6.27-7-generic-di< 2.6.27-7.16UNKNOWN
Ubuntu8.10noarchblock-modules-2.6.27-7-generic-di< 2.6.27-7.16UNKNOWN
Ubuntu8.10noarchcrypto-modules-2.6.27-7-generic-di< 2.6.27-7.16UNKNOWN
Ubuntu8.10noarchfat-modules-2.6.27-7-generic-di< 2.6.27-7.16UNKNOWN
Ubuntu8.10noarchfb-modules-2.6.27-7-generic-di< 2.6.27-7.16UNKNOWN
Ubuntu8.10noarchfirewire-core-modules-2.6.27-7-generic-di< 2.6.27-7.16UNKNOWN
Ubuntu8.10noarchfloppy-modules-2.6.27-7-generic-di< 2.6.27-7.16UNKNOWN
Ubuntu8.10noarchfs-core-modules-2.6.27-7-generic-di< 2.6.27-7.16UNKNOWN
Ubuntu8.10noarchfs-secondary-modules-2.6.27-7-generic-di< 2.6.27-7.16UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	8.10	noarch	linux-image-2.6.27-7-virtual	< 2.6.27-7.16	UNKNOWN
Ubuntu	8.10	noarch	acpi-modules-2.6.27-7-generic-di	< 2.6.27-7.16	UNKNOWN
Ubuntu	8.10	noarch	block-modules-2.6.27-7-generic-di	< 2.6.27-7.16	UNKNOWN
Ubuntu	8.10	noarch	crypto-modules-2.6.27-7-generic-di	< 2.6.27-7.16	UNKNOWN
Ubuntu	8.10	noarch	fat-modules-2.6.27-7-generic-di	< 2.6.27-7.16	UNKNOWN
Ubuntu	8.10	noarch	fb-modules-2.6.27-7-generic-di	< 2.6.27-7.16	UNKNOWN
Ubuntu	8.10	noarch	firewire-core-modules-2.6.27-7-generic-di	< 2.6.27-7.16	UNKNOWN
Ubuntu	8.10	noarch	floppy-modules-2.6.27-7-generic-di	< 2.6.27-7.16	UNKNOWN
Ubuntu	8.10	noarch	fs-core-modules-2.6.27-7-generic-di	< 2.6.27-7.16	UNKNOWN
Ubuntu	8.10	noarch	fs-secondary-modules-2.6.27-7-generic-di	< 2.6.27-7.16	UNKNOWN