NVD

Id
1615  
Name
CVE-2008-1673  
Description
The asn1 implementation in (a) the Linux kernel 2.4 before 2.4.36.6 and 2.6 before 2.6.25.5, as used in the cifs and ip_nat_snmp_basic modules; and (b) the gxsnmp package; does not properly validate length values during decoding of ASN.1 BER data, which allows remote attackers to cause a denial of service (crash) or execute arbitrary code via (1) a length greater than the working buffer, which can lead to an unspecified overflow; (2) an oid length of zero, which can lead to an off-by-one error; or (3) an indefinite length for a primitive encoding.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-06-09  
Modified Date
2012-11-26  
Seq
2008-1673  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
10455 1615 CVE-2008-1673 http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git;a=commit;h=33afb8403f361919aa5c8fe1d0a4f5ddbfbbea3c  View
10456 1615 CVE-2008-1673 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=ddb2c43594f22843e9f3153da151deaba1a834c5  View
10457 1615 CVE-2008-1673 http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.6  View
10458 1615 CVE-2008-1673 http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.5  View
10459 1615 CVE-2008-1673 SUSE-SA:2008:035  View
10460 1615 CVE-2008-1673 SUSE-SA:2008:038  View
10461 1615 CVE-2008-1673 SUSE-SA:2008:047  View
10462 1615 CVE-2008-1673 SUSE-SA:2008:048  View
10463 1615 CVE-2008-1673 SUSE-SA:2008:049  View
10464 1615 CVE-2008-1673 SUSE-SA:2008:052  View
10465 1615 CVE-2008-1673 SUSE-SR:2008:025  View
10466 1615 CVE-2008-1673 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0189  View
10467 1615 CVE-2008-1673 MDVSA-2008:113  View
10468 1615 CVE-2008-1673 MDVSA-2008:174  View
10469 1615 CVE-2008-1673 20080611 rPSA-2008-0189-1 kernel xen  View
10470 1615 CVE-2008-1673 29589  View
10471 1615 CVE-2008-1673 1020210  View
10472 1615 CVE-2008-1673 USN-625-1  View
10473 1615 CVE-2008-1673 ADV-2008-1770  View
10474 1615 CVE-2008-1673 kernel-ber-decoder-bo(42921)  View
10475 1615 CVE-2008-1673 https://bugzilla.redhat.com/show_bug.cgi?id=443962  View
10476 1615 CVE-2008-1673 FEDORA-2008-5308  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47115 JVNDB-2008-002425 Linux kernel および gxsnmp パッケージの asn1 の実装における任意のコードを実行される脆弱性 cifs および ip_nat_snmp_basic モジュールで使用される Linux kernel および gxsnmp パッケージ の asn1 の実装には、ASN.1 の BER でエンコードされたデータのデコード時に長さの値を適切に検証しないため、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。 CVE-2008-1673 31786 CVE-2008-1673 1615 10 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002425.html 2008-06-10 2010-02-01 View