CVE

Id
31484  
CVE No.
CVE-2008-1367  
Status
Candidate  
Description
gcc 4.3.x does not generate a cld instruction while compiling functions used for string manipulation such as memcpy and memmove on x86 and i386, which can prevent the direction flag (DF) from being reset in violation of ABI conventions and cause data to be copied in the wrong direction during signal handling in the Linux kernel, which might allow context-dependent attackers to trigger memory corruption. NOTE: this issue was originally reported for CPU consumption in SBCL.  
Phase
Assigned (20080317)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
337200 31484 CVE-2008-1367 MLIST:[git-commits-head] 20080307 x86: clear DF before calling signal handler  View
337201 31484 CVE-2008-1367 URL:http://marc.info/?l=git-commits-head&m=120492000901739&w=2  View
337202 31484 CVE-2008-1367 MLIST:[Security-announce] 20080728 VMSA-2008-00011 Updated ESX service console packages for Samba and vmnix  View
337203 31484 CVE-2008-1367 URL:http://lists.vmware.com/pipermail/security-announce/2008/000023.html  View
337204 31484 CVE-2008-1367 MISC:http://lwn.net/Articles/272048/#Comments  View
337205 31484 CVE-2008-1367 CONFIRM:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=469058  View
337206 31484 CVE-2008-1367 MLIST:[linux-kernel] 20080305 Linux doesn"t follow x86/x86-64 ABI wrt direction flag  View
337207 31484 CVE-2008-1367 URL:http://lkml.org/lkml/2008/3/5/207  View
337208 31484 CVE-2008-1367 MLIST:[gcc-patches] 20080306 [PATCH, i386]: Emit cld instruction when stringops are used  View
337209 31484 CVE-2008-1367 URL:http://gcc.gnu.org/ml/gcc-patches/2008-03/msg00417.html  View
337210 31484 CVE-2008-1367 MLIST:[gcc-patches] 20080306 Re: [PATCH, i386]: Emit cld instruction when stringops are used  View
337211 31484 CVE-2008-1367 URL:http://gcc.gnu.org/ml/gcc-patches/2008-03/msg00432.html  View
337212 31484 CVE-2008-1367 MLIST:[gcc-patches] 20080306 Re: [PATCH, i386]: Emit cld instruction when stringops are used  View
337213 31484 CVE-2008-1367 URL:http://gcc.gnu.org/ml/gcc-patches/2008-03/msg00428.html  View
337214 31484 CVE-2008-1367 MLIST:[gcc-patches] 20080307 Re: [PATCH, i386]: Emit cld instruction when stringops are used  View
337215 31484 CVE-2008-1367 URL:http://gcc.gnu.org/ml/gcc-patches/2008-03/msg00499.html  View
337216 31484 CVE-2008-1367 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=e40cd10ccff3d9fbffd57b93780bee4b7b9bff51  View
337217 31484 CVE-2008-1367 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=437312  View
337218 31484 CVE-2008-1367 REDHAT:RHSA-2008:0211  View
337219 31484 CVE-2008-1367 URL:http://www.redhat.com/support/errata/RHSA-2008-0211.html  View
337220 31484 CVE-2008-1367 REDHAT:RHSA-2008:0233  View
337221 31484 CVE-2008-1367 URL:http://www.redhat.com/support/errata/RHSA-2008-0233.html  View
337222 31484 CVE-2008-1367 REDHAT:RHSA-2008:0508  View
337223 31484 CVE-2008-1367 URL:http://rhn.redhat.com/errata/RHSA-2008-0508.html  View
337224 31484 CVE-2008-1367 SUSE:SUSE-SA:2008:030  View
337225 31484 CVE-2008-1367 URL:http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html  View
337226 31484 CVE-2008-1367 SUSE:SUSE-SA:2008:031  View
337227 31484 CVE-2008-1367 URL:http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00000.html  View
337228 31484 CVE-2008-1367 SUSE:SUSE-SA:2008:032  View
337229 31484 CVE-2008-1367 URL:http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html  View
337230 31484 CVE-2008-1367 BID:29084  View
337231 31484 CVE-2008-1367 URL:http://www.securityfocus.com/bid/29084  View
337232 31484 CVE-2008-1367 OVAL:oval:org.mitre.oval:def:11108  View
337233 31484 CVE-2008-1367 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11108  View
337234 31484 CVE-2008-1367 VUPEN:ADV-2008-2222  View
337235 31484 CVE-2008-1367 URL:http://www.vupen.com/english/advisories/2008/2222/references  View
337236 31484 CVE-2008-1367 SECUNIA:30818  View
337237 31484 CVE-2008-1367 URL:http://secunia.com/advisories/30818  View
337238 31484 CVE-2008-1367 SECUNIA:30890  View
337239 31484 CVE-2008-1367 URL:http://secunia.com/advisories/30890  View
337240 31484 CVE-2008-1367 SECUNIA:30962  View
337241 31484 CVE-2008-1367 URL:http://secunia.com/advisories/30962  View
337242 31484 CVE-2008-1367 SECUNIA:30850  View
337243 31484 CVE-2008-1367 URL:http://secunia.com/advisories/30850  View
337244 31484 CVE-2008-1367 SECUNIA:31246  View
337245 31484 CVE-2008-1367 URL:http://secunia.com/advisories/31246  View
337246 31484 CVE-2008-1367 SECUNIA:30110  View
337247 31484 CVE-2008-1367 URL:http://secunia.com/advisories/30110  View
337248 31484 CVE-2008-1367 SECUNIA:30116  View
337249 31484 CVE-2008-1367 URL:http://secunia.com/advisories/30116  View
337250 31484 CVE-2008-1367 XF:gcc-cld-dos(41340)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
47547 JVNDB-2008-002857 Drake CMS の install/index.php における絶対パストラバーサルの脆弱性 Drake CMS の install/index.php には、絶対パストラバーサルの脆弱性が存在します。 CVE-2008-1371 31484 3.6 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002857.html  View