NVD

Id
3400  
Name
CVE-2008-3528  
Description
The error-reporting functionality in (1) fs/ext2/dir.c, (2) fs/ext3/dir.c, and possibly (3) fs/ext4/dir.c in the Linux kernel 2.6.26.5 does not limit the number of printk console messages that report directory corruption, which allows physically proximate attackers to cause a denial of service (temporary system hang) by mounting a filesystem that has corrupted dir->i_size and dir->i_blocks values and performing (a) read or (b) write operations. NOTE: there are limited scenarios in which this crosses privilege boundaries.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-03  
Published
2008-09-27  
Modified Date
2012-10-29  
Seq
2008-3528  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
21369 3400 CVE-2008-3528 SUSE-SA:2008:051  View
21370 3400 CVE-2008-3528 SUSE-SA:2008:052  View
21371 3400 CVE-2008-3528 SUSE-SA:2008:053  View
21372 3400 CVE-2008-3528 SUSE-SR:2008:025  View
21373 3400 CVE-2008-3528 SUSE-SA:2008:056  View
21374 3400 CVE-2008-3528 SUSE-SA:2008:057  View
21375 3400 CVE-2008-3528 [linux-kernel] 20080913 [PATCH 3/4] ext2: Avoid printk floods in the face of directory corruption  View
21376 3400 CVE-2008-3528 [linux-kernel] 20080913 [PATCH 4/4] ext3: Avoid printk floods in the face of directory corruption  View
21377 3400 CVE-2008-3528 [linux-kernel] 20080918 Re: [PATCH 4/4] ext3: Avoid printk floods in the face of directory corruption  View
21378 3400 CVE-2008-3528 oval:org.mitre.oval:def:10852  View
21379 3400 CVE-2008-3528 oval:org.mitre.oval:def:8642  View
21380 3400 CVE-2008-3528 RHSA-2008:0972  View
21381 3400 CVE-2008-3528 http://wiki.rpath.com/Advisories:rPSA-2008-0316  View
21382 3400 CVE-2008-3528 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0316  View
21383 3400 CVE-2008-3528 DSA-1681  View
21384 3400 CVE-2008-3528 DSA-1687  View
21385 3400 CVE-2008-3528 MDVSA-2008:224  View
21386 3400 CVE-2008-3528 [oss-security] 20080918 CVE-2008-3528 Linux kernel ext[234] directory corruption DoS  View
21387 3400 CVE-2008-3528 RHSA-2009:0009  View
21388 3400 CVE-2008-3528 RHSA-2009:0326  View
21389 3400 CVE-2008-3528 20081112 rPSA-2008-0316-1 kernel  View
21390 3400 CVE-2008-3528 20091120 VMSA-2009-0016 VMware vCenter and ESX update release and vMA patch release address multiple security issue in third party components  View
21391 3400 CVE-2008-3528 USN-662-1  View
21392 3400 CVE-2008-3528 http://www.vmware.com/security/advisories/VMSA-2009-0016.html  View
21393 3400 CVE-2008-3528 ADV-2009-3316  View
21394 3400 CVE-2008-3528 kernel-errorreporting-dos(45720)  View
21395 3400 CVE-2008-3528 https://bugzilla.redhat.com/show_bug.cgi?id=459577  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46663 JVNDB-2008-001973 Linux kernel におけるサービス運用妨害 (DoS) の脆弱性 Linux kernel の fs/ext2/dir.c、fs/ext3/dir.c、および fs/ext4/dir.c には、printk コンソールメッセージ数を制限しないため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2008-3528 33641 CVE-2008-3528 3400 7.1 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001973.html 2008-09-27 2009-10-09 View