CVE-2008-2358

Integer overflow in the dccp_feat_change function in net/dccp/feat.c in the Datagram Congestion Control Protocol (DCCP) subsystem in the Linux kernel 2.6.18, and 2.6.17 through 2.6.20, allows local users to gain privileges via an invalid feature length, which leads to a heap-based buffer overflow.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.2 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:C/I:C/A:C
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 20%
VendorProductVersion
linuxlinux_kernel
2.6.17
linuxlinux_kernel
2.6.18
linuxlinux_kernel
2.6.19
linuxlinux_kernel
2.6.20
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
linux
hardy
Fixed 2.6.24-19.36
released
gutsy
dne
feisty
dne
dapper
dne
linux-source-2.6.15
hardy
dne
gutsy
dne
feisty
dne
dapper
not-affected
linux-source-2.6.20
hardy
dne
gutsy
dne
feisty
Fixed 2.6.20-17.37
released
dapper
dne
linux-source-2.6.22
hardy
dne
gutsy
Fixed 2.6.22-15.56
released
feisty
dne
dapper
dne
Common Weakness Enumeration
References
http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html
http://secunia.com/advisories/30000
http://secunia.com/advisories/30818
http://secunia.com/advisories/30849
http://secunia.com/advisories/30920
http://secunia.com/advisories/31107
http://www.debian.org/security/2008/dsa-1592
http://www.mandriva.com/security/advisories?name=MDVSA-2008:112
http://www.mandriva.com/security/advisories?name=MDVSA-2008:167
http://www.redhat.com/support/errata/RHSA-2008-0519.html
http://www.securityfocus.com/bid/29603
http://www.securitytracker.com/id?1020211
http://www.ubuntu.com/usn/usn-625-1
https://bugzilla.redhat.com/show_bug.cgi?id=447389
https://exchange.xforce.ibmcloud.com/vulnerabilities/43034
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9644
https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00082.html
http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html
http://secunia.com/advisories/30000
http://secunia.com/advisories/30818
http://secunia.com/advisories/30849
http://secunia.com/advisories/30920
http://secunia.com/advisories/31107
http://www.debian.org/security/2008/dsa-1592
http://www.mandriva.com/security/advisories?name=MDVSA-2008:112
http://www.mandriva.com/security/advisories?name=MDVSA-2008:167
http://www.redhat.com/support/errata/RHSA-2008-0519.html
http://www.securityfocus.com/bid/29603
http://www.securitytracker.com/id?1020211
http://www.ubuntu.com/usn/usn-625-1
https://bugzilla.redhat.com/show_bug.cgi?id=447389
https://exchange.xforce.ibmcloud.com/vulnerabilities/43034
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9644
https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00082.html