NVD

Id
2277  
Name
CVE-2008-2358  
Description
Integer overflow in the dccp_feat_change function in net/dccp/feat.c in the Datagram Congestion Control Protocol (DCCP) subsystem in the Linux kernel 2.6.18, and 2.6.17 through 2.6.20, allows local users to gain privileges via an invalid feature length, which leads to a heap-based buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-06-09  
Modified Date
2010-11-16  
Seq
2008-2358  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
14480 2277 CVE-2008-2358 SUSE-SA:2008:030  View
14481 2277 CVE-2008-2358 oval:org.mitre.oval:def:9644  View
14482 2277 CVE-2008-2358 DSA-1592  View
14483 2277 CVE-2008-2358 MDVSA-2008:112  View
14484 2277 CVE-2008-2358 MDVSA-2008:167  View
14485 2277 CVE-2008-2358 RHSA-2008:0519  View
14486 2277 CVE-2008-2358 29603  View
14487 2277 CVE-2008-2358 1020211  View
14488 2277 CVE-2008-2358 USN-625-1  View
14489 2277 CVE-2008-2358 linux-kernel-dccpfeatchange-bo(43034)  View
14490 2277 CVE-2008-2358 https://bugzilla.redhat.com/show_bug.cgi?id=447389  View
14491 2277 CVE-2008-2358 FEDORA-2008-5893  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46161 JVNDB-2008-001471 Linux kernel の dccp_feat_change() 関数にヒープベースのバッファオーバーフローの脆弱性 Linux kernel の Datagram Congestion Control Protocol(DCCP) 実装には、net/dccp/feat.c の dccp_feat_change() 関数において、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2008-2358 32471 CVE-2008-2358 2277 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001471.html 2008-06-10 2008-10-28 View