PT-2008-6964 · Opensuse+1 · Opensuse+1
Wei Wang
·
Publicado
1970-01-01
·
Atualizado
2023-02-13
·
CVE-2008-1673
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
openSUSE kernel-rt debug-debuginfo versions (affected versions not specified)
openSUSE kernel-rt-debugsource versions (affected versions not specified)
Linux kernel versions prior to 2.4.36.6 and prior to 2.6.25.5
Description
The issue concerns multiple vulnerabilities in the kernel packages of the openSUSE operating system, which can lead to breaches of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely. The asn1 implementation in the Linux kernel does not properly validate length values during decoding of ASN.1 BER data, allowing remote attackers to cause a denial of service or execute arbitrary code via various methods, including a length greater than the working buffer, an oid length of zero, or an indefinite length for a primitive encoding.
Recommendations
For openSUSE kernel-rt debug-debuginfo, kernel-rt-debugsource, and kernel-rt debug-debugsource: At the moment, there is no information about a newer version that contains a fix for this vulnerability.
For Linux kernel versions prior to 2.4.36.6 and prior to 2.6.25.5: Update to version 2.4.36.6 or 2.6.25.5 or later to resolve the issue.
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Linux Kernel
Opensuse