CVE-2008-4395 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Vector
NIST	NIST	8.3 UNKNOWN	ADJACENT_NETWORK	LOW	AV:A/AC:L/Au:N/C:C/I:C/A:C
canonical	CNA	---			---
CVE	ADP	---			---

Base Score

CVSS 3.x

EPSS Score

Percentile: 87%

Vendor	Product	Version
linux	linux_kernel	2.6
ubuntu	linux_kernel	𝑥 ≤ 2.6.26

𝑥

= Vulnerable software versions

Ubuntu Releases

Ubuntu Product

Codename

linux

intrepid	Fixed 2.6.27-7.16 released
hardy	not-affected
gutsy	dne
feisty	dne
dapper	dne

linux-source-2.6.15

intrepid	dne
hardy	dne
gutsy	dne
feisty	dne
dapper	not-affected

linux-source-2.6.20

intrepid	dne
hardy	dne
gutsy	dne
feisty	not-affected
dapper	dne

linux-source-2.6.22

intrepid	dne
hardy	dne
gutsy	not-affected
feisty	dne
dapper	dne

linux-ubuntu-modules-2.6.22

intrepid	dne
hardy	dne
gutsy	Fixed 2.6.22-15.40 released
feisty	dne
dapper	dne

linux-ubuntu-modules-2.6.24

intrepid	dne
hardy	Fixed 2.6.24-21.33 released
gutsy	dne
feisty	dne
dapper	dne

Common Weakness Enumeration

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
The software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.

References

http://bugs.gentoo.org/show_bug.cgi?id=239371

http://git.frugalware.org/gitweb/gitweb.cgi?p=frugalware-current.git%3Ba=commitdiff%3Bh=49945b423c2f7e33b4c579ca460df6a806ee8f9f

http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00001.html

http://secunia.com/advisories/32509

http://www.mail-archive.com/frugalware-git%40frugalware.org/msg22366.html

http://www.securityfocus.com/bid/32118

http://www.securitytracker.com/id?1021142

http://www.ubuntu.com/usn/usn-662-1

http://www.ubuntu.com/usn/usn-662-2

https://bugs.launchpad.net/bugs/cve/2008-4395

https://bugs.launchpad.net/ubuntu/+source/linux/+bug/275860

https://exchange.xforce.ibmcloud.com/vulnerabilities/46437