PT-2008-3846 · Linux+1 · Linux Kernel+1

Published 2008-06-10 · Updated 2017-09-29 · CVE-2008-2358

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 2.6.17 through 2.6.20 Linux kernel version 2.6.18

Description: The issue is related to an integer overflow in the dccp feat change function, which can lead to a heap-based buffer overflow. This allows local users to gain privileges via an invalid feature length.

Recommendations: For Linux kernel versions 2.6.17 through 2.6.20, consider upgrading to a version that contains a fix for this issue. For Linux kernel version 2.6.18, consider upgrading to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2008-2358

DSA-1592-1

RHSA-2008:0519

RHSA-2008_0519

Affected Products

Linux Kernel

Red Hat

References · 23

• http://mandriva.com/security/advisories?name=MDVSA-2008:112 · Vendor Advisory
• http://secunia.com/advisories/30920 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html · Vendor Advisory
• http://ubuntu.com/usn/usn-625-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-2358 · Security Note
• https://redhat.com/archives/fedora-package-announce/2008-July/msg00082.html · Vendor Advisory
• http://secunia.com/advisories/30849 · Vendor Advisory
• http://secunia.com/advisories/30000 · Vendor Advisory
• http://debian.org/security/2008/dsa-1592 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2008:167 · Vendor Advisory
• http://secunia.com/advisories/30818 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2008-0519.html · Vendor Advisory
• http://secunia.com/advisories/31107 · Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2008-2729 · Note
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=3022d734a54cbd2b65eea9a024564821101b4a9a;hp=f0f4c3432e5e1087b3a8c0e6bd4113d3c37497ff · Note