PT-2008-6875 · Linux+1 · Linux+1

Eugene Teo · Publicado 1970-01-01 · Atualizado 2017-09-29 · CVE-2008-5025

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions linux-headers-2.6.18-6 versions 2.6.18-6 linux-image-2.6.18-6 versions 2.6.18-6 linux-modules-2.6.18-6 versions 2.6.18-6 linux-headers-2.6.18-6-486 version 2.6.18-6 linux-headers-2.6.18-6-686 version 2.6.18-6 linux-headers-2.6.18-6-686-bigmem version 2.6.18-6 linux-headers-2.6.18-6-alpha version 2.6.18-6 linux-headers-2.6.18-6-alpha-generic version 2.6.18-6 linux-headers-2.6.18-6-alpha-legacy version 2.6.18-6 linux-headers-2.6.18-6-alpha-smp version 2.6.18-6 linux-headers-2.6.18-6-amd64 version 2.6.18-6 linux-headers-2.6.18-6-footbridge version 2.6.18-6 linux-headers-2.6.18-6-iop32x version 2.6.18-6 linux-headers-2.6.18-6-itanium version 2.6.18-6 linux-headers-2.6.18-6-k7 version 2.6.18-6 linux-headers-2.6.18-6-mckinley version 2.6.18-6 linux-headers-2.6.18-6-parisc version 2.6.18-6 linux-headers-2.6.18-6-parisc64 version 2.6.18-6 linux-headers-2.6.18-6-parisc64-smp version 2.6.18-6 linux-headers-2.6.18-6-powerpc version 2.6.18-6 linux-headers-2.6.18-6-powerpc-miboot version 2.6.18-6 linux-headers-2.6.18-6-powerpc-smp version 2.6.18-6 linux-headers-2.6.18-6-powerpc64 version 2.6.18-6 linux-headers-2.6.18-6-qemu version 2.6.18-6 linux-headers-2.6.18-6-r3k-kn02 version 2.6.18-6 linux-headers-2.6.18-6-r4k-ip22 version 2.6.18-6 linux-headers-2.6.18-6-r4k-kn04 version 2.6.18-6 linux-headers-2.6.18-6-r5k-cobalt version 2.6.18-6 linux-headers-2.6.18-6-r5k-ip32 version 2.6.18-6 linux-headers-2.6.18-6-s390 version 2.6.18-6 linux-headers-2.6.18-6-s390x version 2.6.18-6 linux-headers-2.6.18-6-s3c2410 version 2.6.18-6 linux-headers-2.6.18-6-sb1-bcm91250a version 2.6.18-6 linux-headers-2.6.18-6-sb1a-bcm91480b version 2.6.18-6 linux-headers-2.6.18-6-sparc32 version 2.6.18-6 linux-headers-2.6.18-6-sparc64 version 2.6.18-6 linux-headers-2.6.18-6-sparc64-smp version 2.6.18-6 linux-headers-2.6.18-6-vserver version 2.6.18-6 linux-headers-2.6.18-6-vserver-686 version 2.6.18-6 linux-headers-2.6.18-6-vserver-amd64 version 2.6.18-6 linux-headers-2.6.18-6-vserver-k7 version 2.6.18-6 linux-headers-2.6.18-6-vserver-powerpc version 2.6.18-6 linux-headers-2.6.18-6-vserver-powerpc64 version 2.6.18-6 linux-headers-2.6.18-6-vserver-s390x version 2.6.18-6 linux-headers-2.6.18-6-vserver-sparc64 version 2.6.18-6 linux-headers-2.6.18-6-xen version 2.6.18-6 linux-headers-2.6.18-6-xen-686 version 2.6.18-6 linux-headers-2.6.18-6-xen-amd64 version 2.6.18-6 linux-headers-2.6.18-6-xen-vserver version 2.6.18-6 linux-headers-2.6.18-6-xen-vserver-686 version 2.6.18-6 linux-headers-2.6.18-6-xen-vserver-amd64 version 2.6.18-6 linux-image-2.6.18-6-486 version 2.6.18-6 linux-image-2.6.18-6-686 version 2.6.18-6 linux-image-2.6.18-6-686-bigmem version 2.6.18-6 linux-image-2.6.18-6-alpha version 2.6.18-6 linux-image-2.6.18-6-alpha-generic version 2.6.18-6 linux-image-2.6.18-6-alpha-legacy version 2.6.18-6 linux-image-2.6.18-6-alpha-smp version 2.6.18-6 linux-image-2.6.18-6-amd64 version 2.6.18-6 linux-image-2.6.18-6-footbridge version 2.6.18-6 linux-image-2.6.18-6-iop32x version 2.6.18-6 linux-image-2.6.18-6-itanium version 2.6.18-6 linux-image-2.6.18-6-k7 version 2.6.18-6 linux-image-2.6.18-6-mckinley version 2.6.18-6 linux-image-2.6.18-6-parisc version 2.6.18-6 linux-image-2.6.18-6-parisc64 version 2.6.18-6 linux-image-2.6.18-6-parisc64-smp version 2.6.18-6 linux-image-2.6.18-6-powerpc version 2.6.18-6 linux-image-2.6.18-6-powerpc-miboot version 2.6.18-6 linux-image-2.6.18-6-powerpc-smp version 2.6.18-6 linux-image-2.6.18-6-powerpc64 version 2.6.18-6 linux-image-2.6.18-6-qemu version 2.6.18-6 linux-image-2.6.18-6-r3k-kn02 version 2.6.18-6 linux-image-2.6.18-6-r4k-ip22 version 2.6.18-6 linux-image-2.6.18-6-r4k-kn04 version 2.6.18-6 linux-image-2.6.18-6-r5k-cobalt version 2.6.18-6 linux-image-2.6.18-6-r5k-ip32 version 2.6.18-6 linux-image-2.6.18-6-s390 version 2.6.18-6 linux-image-2.6.18-6-s390-tape version 2.6.18-6 linux-image-2.6.18-6-s390x version 2.6.18-6 linux-image-2.6.18-6-s3c2410 version 2.6.18-6 linux-image-2.6.18-6-sb1-bcm91250a version 2.6.18-6 linux-image-2.6.18-6-sb1a-bcm91480b version 2.6.18-6 linux-image-2.6.18-6-sparc32 version 2.6.18-6 linux-image-2.6.18-6-sparc64 version 2.6.18-6 linux-image-2.6.18-6-sparc64-smp version 2.6.18-6 linux-image-2.6.18-6-vserver version 2.6.18-6 linux-image-2.6.18-6-vserver-686 version 2.6.18-6 linux-image-2.6.18-6-vserver-amd64 version 2.6.18-6 linux-image-2.6.18-6-vserver-alpha version 2.6.18-6 linux-image-2.6.18-6-vserver-k7 version 2.6.18-6 linux-image-2.6.18-6-vserver-powerpc version 2.6.18-6 linux-image-2.6.18-6-vserver-powerpc64 version 2.6.18-6 linux-image-2.6.18-6-vserver-s390x version 2.6.18-6 linux-image-2.6.18-6-vserver-sparc64 version 2.6.18-6 linux-image-2.6.18-6-xen version 2.6.18-6 linux-image-2.6.18-6-xen-686 version 2.6.18-6 linux-image-2.6.18-6-xen-amd64 version 2.6.18-6 linux-image-2.6.18-6-xen-vserver version 2.6.18-6 linux-image-2.6.18-6-xen-vserver-686 version 2.6.18-6 linux-image-2.6.18-6-xen-vserver-amd64 version 2.6.18-6

Description The issue is related to multiple vulnerabilities in the Linux kernel, specifically in the 2.6.18-6 version, which can lead to a denial of service (memory corruption or system crash) via an hfs filesystem image with an invalid catalog namelength field. The vulnerabilities can be exploited remotely.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

BDU:2015-00886

BDU:2015-01470

BDU:2015-01471

BDU:2015-01472

BDU:2015-01473

BDU:2015-01474

BDU:2015-01475

BDU:2015-01476

BDU:2015-01477

BDU:2015-01478

BDU:2015-01479

BDU:2015-01480

BDU:2015-01481

BDU:2015-01482

BDU:2015-01483

BDU:2015-01484

BDU:2015-01485

BDU:2015-01486

BDU:2015-01487

BDU:2015-01488

BDU:2015-01489

BDU:2015-01490

BDU:2015-01491

BDU:2015-01492

BDU:2015-01493

BDU:2015-01494

BDU:2015-01495

BDU:2015-01496

BDU:2015-01497

BDU:2015-01498

BDU:2015-01499

BDU:2015-01500

BDU:2015-01501

BDU:2015-01502

BDU:2015-01503

BDU:2015-01504

BDU:2015-01505

BDU:2015-01506

BDU:2015-01507

BDU:2015-01508

BDU:2015-01509

BDU:2015-01510

BDU:2015-01511

BDU:2015-01512

BDU:2015-01513

BDU:2015-01514

BDU:2015-01515

BDU:2015-01516

BDU:2015-01517

BDU:2015-01518

BDU:2015-01519

BDU:2015-01520

BDU:2015-01521

BDU:2015-01522

BDU:2015-01523

BDU:2015-01524

BDU:2015-01525

BDU:2015-01526

BDU:2015-01527

BDU:2015-01528

BDU:2015-01529

BDU:2015-01530

BDU:2015-01531

BDU:2015-01532

BDU:2015-01533

BDU:2015-01534

BDU:2015-01535

BDU:2015-01536

BDU:2015-01537

BDU:2015-01538

BDU:2015-01539

BDU:2015-01540

BDU:2015-01541

BDU:2015-01542

BDU:2015-01543

BDU:2015-01544

BDU:2015-01545

BDU:2015-01546

BDU:2015-01547

BDU:2015-01548

BDU:2015-01549

BDU:2015-01550

BDU:2015-01551

BDU:2015-01552

BDU:2015-01553

BDU:2015-01554

BDU:2015-01555

BDU:2015-01556

BDU:2015-01557

BDU:2015-01558

BDU:2015-01559

BDU:2015-01560

BDU:2015-01561

BDU:2015-01562

BDU:2015-01563

BDU:2015-01564

BDU:2015-01565

BDU:2015-01566

BDU:2015-01567

BDU:2015-01568

BDU:2015-01569

BDU:2015-01570

BDU:2015-01571

BDU:2015-01572

BDU:2015-01573

BDU:2015-01574

BDU:2015-01575

BDU:2015-01576

BDU:2015-01577

BDU:2015-01578

BDU:2015-01579

BDU:2015-01580

BDU:2015-01581

BDU:2015-01582

BDU:2015-01583

BDU:2015-01584

BDU:2015-01585

BDU:2015-01586

BDU:2015-01587

BDU:2015-01588

BDU:2015-01589

BDU:2015-01590

BDU:2015-01591

BDU:2015-01592

BDU:2015-01593

BDU:2015-01594

CVE-2008-5025

DSA-1681-1

DSA-1687-1

RHSA-2009:0014

RHSA-2009:0264

RHSA-2009_0014

RHSA-2009_0264

Produtos afetados

Linux

Red Hat

Referências · 313

• https://bdu.fstec.ru/vul/2015-01527 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-01857 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-01475 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-01891 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-01906 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-01847 · Nota de Segurança
• http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00010.html · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-01903 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4554 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4933 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-01838 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-01478 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-01864 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-01878 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-01591 · Nota de Segurança