Linux Kernel DCCP Subsystem Buffer Overflow Vulnerability
BID:29603
Info
Linux Kernel DCCP Subsystem Buffer Overflow Vulnerability
| Bugtraq ID: | 29603 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2008-2358 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 09 2008 12:00AM |
| Updated: | Apr 13 2015 10:00PM |
| Credit: | Brandon Edwards |
| Vulnerable: |
Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 7.10 sparc Ubuntu Ubuntu Linux 7.10 powerpc Ubuntu Ubuntu Linux 7.10 lpia Ubuntu Ubuntu Linux 7.10 i386 Ubuntu Ubuntu Linux 7.10 amd64 Ubuntu Ubuntu Linux 7.04 sparc Ubuntu Ubuntu Linux 7.04 powerpc Ubuntu Ubuntu Linux 7.04 i386 Ubuntu Ubuntu Linux 7.04 amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 SuSE openSUSE 10.3 S.u.S.E. openSUSE 10.2 Red Hat Enterprise Linux Desktop 5 client Red Hat Enterprise Linux 5 Server Mandriva Linux Mandrake 2007.1 x86_64 Mandriva Linux Mandrake 2007.1 Linux kernel 2.6.18 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0 |
| Not Vulnerable: | |
Discussion
Linux Kernel DCCP Subsystem Buffer Overflow Vulnerability
The Linux kernel is prone to a buffer-overflow vulnerability caused by insufficient boundary checking.
Attackers can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.
Linux kernel 2.6.18 is known to be vulnerable, but other versions are likely affected as well.
The Linux kernel is prone to a buffer-overflow vulnerability caused by insufficient boundary checking.
Attackers can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.
Linux kernel 2.6.18 is known to be vulnerable, but other versions are likely affected as well.
Exploit / POC
Linux Kernel DCCP Subsystem Buffer Overflow Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Linux Kernel DCCP Subsystem Buffer Overflow Vulnerability
Solution:
Fixes are available. Please see the references for more information.
Solution:
Fixes are available. Please see the references for more information.
References
Linux Kernel DCCP Subsystem Buffer Overflow Vulnerability
References:
References:
- Linux kernel Homepage (kernel.org)
- RHSA-2008:0519-24 kernel security and bug fix update (Red Hat)
- USN-625-1: Linux kernel vulnerabilities (Ubuntu)