CVE-2008-1673 The asn1 implementation in (a) the Linux kernel 2.4 before 2.4.36.6 and 2.6 before 2.6.25.5, as used in the cifs and ip_nat_snmp_basic modules; and (b) the gxsnmp package; does not properly validate l...
HighCVSS 10.0
EPSS 7.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The asn1 implementation in (a) the Linux kernel 2.4 before 2.4.36.6 and 2.6 before 2.6.25.5, as used in the cifs and ip_nat_snmp_basic modules; and (b) the gxsnmp package; does not properly validate length values during decoding of ASN.1 BER data, which allows remote attackers to cause a denial of service (crash) or execute arbitrary code via (1) a length greater than the working buffer, which can lead to an unspecified overflow; (2) an oid length of zero, which can lead to an off-by-one error; or (3) an indefinite length for a primitive encoding.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian linux | = 4.0 | No fix listed |
| Linux kernel | = 2.4.0 | No fix listed |
| Linux kernel | = 2.4.0-test1 | No fix listed |
| Linux kernel | = 2.4.0-test10 | No fix listed |
| Linux kernel | = 2.4.0-test11 | No fix listed |
| Linux kernel | = 2.4.0-test12 | No fix listed |
| Linux kernel | = 2.4.0-test2 | No fix listed |
| Linux kernel | = 2.4.0-test3 | No fix listed |
| Linux kernel | = 2.4.0-test4 | No fix listed |
| Linux kernel | = 2.4.0-test5 | No fix listed |
| Linux kernel | = 2.4.0-test6 | No fix listed |
| Linux kernel | = 2.4.0-test7 | No fix listed |
| Linux kernel | = 2.4.0-test8 | No fix listed |
| Linux kernel | = 2.4.0-test9 | No fix listed |
| Linux kernel | = 2.4.1 | No fix listed |
| Linux kernel | = 2.4.2 | No fix listed |
| Linux kernel | = 2.4.3 | No fix listed |
| Linux kernel | = 2.4.4 | No fix listed |
| Linux kernel | = 2.4.5 | No fix listed |
| Linux kernel | = 2.4.6 | No fix listed |
| Linux kernel | = 2.4.7 | No fix listed |
| Linux kernel | = 2.4.8 | No fix listed |
| Linux kernel | = 2.4.9 | No fix listed |
| Linux kernel | = 2.4.10 | No fix listed |
| Linux kernel | = 2.4.11 | No fix listed |
Show 175 more
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux kernel | = 2.4.12 | No fix listed |
| Linux kernel | = 2.4.13 | No fix listed |
| Linux kernel | = 2.4.14 | No fix listed |
| Linux kernel | = 2.4.15 | No fix listed |
| Linux kernel | = 2.4.16 | No fix listed |
| Linux kernel | = 2.4.17 | No fix listed |
| Linux kernel | = 2.4.18 | No fix listed |
| Linux kernel | = 2.4.18-pre1 | No fix listed |
| Linux kernel | = 2.4.18-pre2 | No fix listed |
| Linux kernel | = 2.4.18-pre3 | No fix listed |
| Linux kernel | = 2.4.18-pre4 | No fix listed |
| Linux kernel | = 2.4.18-pre5 | No fix listed |
| Linux kernel | = 2.4.18-pre6 | No fix listed |
| Linux kernel | = 2.4.18-pre7 | No fix listed |
| Linux kernel | = 2.4.18-pre8 | No fix listed |
| Linux kernel | = 2.4.19 | No fix listed |
| Linux kernel | = 2.4.19-pre1 | No fix listed |
| Linux kernel | = 2.4.19-pre2 | No fix listed |
| Linux kernel | = 2.4.19-pre3 | No fix listed |
| Linux kernel | = 2.4.19-pre4 | No fix listed |
| Linux kernel | = 2.4.19-pre5 | No fix listed |
| Linux kernel | = 2.4.19-pre6 | No fix listed |
| Linux kernel | = 2.4.20 | No fix listed |
| Linux kernel | = 2.4.21 | No fix listed |
| Linux kernel | = 2.4.21-pre1 | No fix listed |
| Linux kernel | = 2.4.21-pre4 | No fix listed |
| Linux kernel | = 2.4.21-pre7 | No fix listed |
| Linux kernel | = 2.4.22 | No fix listed |
| Linux kernel | = 2.4.23 | No fix listed |
| Linux kernel | = 2.4.23-pre9 | No fix listed |
| Linux kernel | = 2.4.23_ow2 | No fix listed |
| Linux kernel | = 2.4.24 | No fix listed |
| Linux kernel | = 2.4.24_ow1 | No fix listed |
| Linux kernel | = 2.4.25 | No fix listed |
| Linux kernel | = 2.4.26 | No fix listed |
| Linux kernel | = 2.4.27 | No fix listed |
| Linux kernel | = 2.4.27-pre1 | No fix listed |
| Linux kernel | = 2.4.27-pre2 | No fix listed |
| Linux kernel | = 2.4.27-pre3 | No fix listed |
| Linux kernel | = 2.4.27-pre4 | No fix listed |
| Linux kernel | = 2.4.27-pre5 | No fix listed |
| Linux kernel | = 2.4.28 | No fix listed |
| Linux kernel | = 2.4.29 | No fix listed |
| Linux kernel | = 2.4.29-rc1 | No fix listed |
| Linux kernel | = 2.4.29-rc2 | No fix listed |
| Linux kernel | = 2.4.30 | No fix listed |
| Linux kernel | = 2.4.30-rc2 | No fix listed |
| Linux kernel | = 2.4.30-rc3 | No fix listed |
| Linux kernel | = 2.4.31 | No fix listed |
| Linux kernel | = 2.4.31-pre1 | No fix listed |
| Linux kernel | = 2.4.32 | No fix listed |
| Linux kernel | = 2.4.32-pre1 | No fix listed |
| Linux kernel | = 2.4.32-pre2 | No fix listed |
| Linux kernel | = 2.4.33 | No fix listed |
| Linux kernel | = 2.4.33-pre1 | No fix listed |
| Linux kernel | = 2.4.33.2 | No fix listed |
| Linux kernel | = 2.4.33.3 | No fix listed |
| Linux kernel | = 2.4.33.4 | No fix listed |
| Linux kernel | = 2.4.33.5 | No fix listed |
| Linux kernel | = 2.4.34 | No fix listed |
| Linux kernel | = 2.4.35 | No fix listed |
| Linux kernel | = 2.4.36 | No fix listed |
| Linux kernel | = 2.4.36.1 | No fix listed |
| Linux kernel | = 2.4.36.2 | No fix listed |
| Linux kernel | = 2.4.36.3 | No fix listed |
| Linux kernel | = 2.4.36.4 | No fix listed |
| Linux kernel | = 2.4.36.5 | No fix listed |
| Linux kernel | = 2.6.0 | No fix listed |
| Linux kernel | = 2.6.0-test1 | No fix listed |
| Linux kernel | = 2.6.0-test2 | No fix listed |
| Linux kernel | = 2.6.0-test3 | No fix listed |
| Linux kernel | = 2.6.0-test4 | No fix listed |
| Linux kernel | = 2.6.0-test5 | No fix listed |
| Linux kernel | = 2.6.0-test6 | No fix listed |
| Linux kernel | = 2.6.0-test7 | No fix listed |
| Linux kernel | = 2.6.0-test8 | No fix listed |
| Linux kernel | = 2.6.0-test9 | No fix listed |
| Linux kernel | = 2.6.1 | No fix listed |
| Linux kernel | = 2.6.1-rc1 | No fix listed |
| Linux kernel | = 2.6.1-rc2 | No fix listed |
| Linux kernel | = 2.6.2 | No fix listed |
| Linux kernel | = 2.6.10 | No fix listed |
| Linux kernel | = 2.6.10-rc2 | No fix listed |
| Linux kernel | = 2.6.11 | No fix listed |
| Linux kernel | = 2.6.11-rc2 | No fix listed |
| Linux kernel | = 2.6.11-rc3 | No fix listed |
| Linux kernel | = 2.6.11-rc4 | No fix listed |
| Linux kernel | = 2.6.11.4 | No fix listed |
| Linux kernel | = 2.6.11.5 | No fix listed |
| Linux kernel | = 2.6.11.6 | No fix listed |
| Linux kernel | = 2.6.11.7 | No fix listed |
| Linux kernel | = 2.6.11.8 | No fix listed |
| Linux kernel | = 2.6.11.11 | No fix listed |
| Linux kernel | = 2.6.11.12 | No fix listed |
| Linux kernel | = 2.6.12 | No fix listed |
| Linux kernel | = 2.6.12-rc1 | No fix listed |
| Linux kernel | = 2.6.12-rc4 | No fix listed |
| Linux kernel | = 2.6.12-rc5 | No fix listed |
| Linux kernel | = 2.6.12.1 | No fix listed |
| Linux kernel | = 2.6.12.2 | No fix listed |
| Linux kernel | = 2.6.12.3 | No fix listed |
| Linux kernel | = 2.6.12.4 | No fix listed |
| Linux kernel | = 2.6.12.5 | No fix listed |
| Linux kernel | = 2.6.12.6 | No fix listed |
| Linux kernel | = 2.6.12.12 | No fix listed |
| Linux kernel | = 2.6.12.22 | No fix listed |
| Linux kernel | = 2.6.13 | No fix listed |
| Linux kernel | = 2.6.13-rc1 | No fix listed |
| Linux kernel | = 2.6.13-rc4 | No fix listed |
| Linux kernel | = 2.6.13-rc6 | No fix listed |
| Linux kernel | = 2.6.13-rc7 | No fix listed |
| Linux kernel | = 2.6.13.1 | No fix listed |
| Linux kernel | = 2.6.13.2 | No fix listed |
| Linux kernel | = 2.6.13.3 | No fix listed |
| Linux kernel | = 2.6.13.4 | No fix listed |
| Linux kernel | = 2.6.14 | No fix listed |
| Linux kernel | = 2.6.14-rc1 | No fix listed |
| Linux kernel | = 2.6.14-rc2 | No fix listed |
| Linux kernel | = 2.6.14-rc3 | No fix listed |
| Linux kernel | = 2.6.14-rc4 | No fix listed |
| Linux kernel | = 2.6.14.1 | No fix listed |
| Linux kernel | = 2.6.14.2 | No fix listed |
| Linux kernel | = 2.6.14.3 | No fix listed |
| Linux kernel | = 2.6.14.4 | No fix listed |
| Linux kernel | = 2.6.14.5 | No fix listed |
| Linux kernel | = 2.6.15 | No fix listed |
| Linux kernel | = 2.6.15-rc1 | No fix listed |
| Linux kernel | = 2.6.15-rc2 | No fix listed |
| Linux kernel | = 2.6.15-rc3 | No fix listed |
| Linux kernel | = 2.6.15.1 | No fix listed |
| Linux kernel | = 2.6.15.2 | No fix listed |
| Linux kernel | = 2.6.15.3 | No fix listed |
| Linux kernel | = 2.6.15.4 | No fix listed |
| Linux kernel | = 2.6.15.5 | No fix listed |
| Linux kernel | = 2.6.15.11 | No fix listed |
| Linux kernel | = 2.6.16 | No fix listed |
| Linux kernel | = 2.6.16-rc1 | No fix listed |
| Linux kernel | = 2.6.16.1 | No fix listed |
| Linux kernel | = 2.6.16.7 | No fix listed |
| Linux kernel | = 2.6.16.9 | No fix listed |
| Linux kernel | = 2.6.16.11 | No fix listed |
| Linux kernel | = 2.6.16.12 | No fix listed |
| Linux kernel | = 2.6.16.13 | No fix listed |
| Linux kernel | = 2.6.16.19 | No fix listed |
| Linux kernel | = 2.6.16.23 | No fix listed |
| Linux kernel | = 2.6.16.27 | No fix listed |
| Linux kernel | = 2.6.17 | No fix listed |
| Linux kernel | = 2.6.17-rc5 | No fix listed |
| Linux kernel | = 2.6.17.1 | No fix listed |
| Linux kernel | = 2.6.17.2 | No fix listed |
| Linux kernel | = 2.6.17.3 | No fix listed |
| Linux kernel | = 2.6.17.5 | No fix listed |
| Linux kernel | = 2.6.17.6 | No fix listed |
| Linux kernel | = 2.6.17.7 | No fix listed |
| Linux kernel | = 2.6.17.8 | No fix listed |
| Linux kernel | = 2.6.17.10 | No fix listed |
| Linux kernel | = 2.6.17.11 | No fix listed |
| Linux kernel | = 2.6.17.12 | No fix listed |
| Linux kernel | = 2.6.17.13 | No fix listed |
| Linux kernel | = 2.6.17.14 | No fix listed |
| Linux kernel | = 2.6.18 | No fix listed |
| Linux kernel | = 2.6.18.1 | No fix listed |
| Linux kernel | = 2.6.18.3 | No fix listed |
| Linux kernel | = 2.6.18.4 | No fix listed |
| Linux kernel | = 2.6.19 | No fix listed |
| Linux kernel | = 2.6.19-rc1 | No fix listed |
| Linux kernel | = 2.6.19-rc2 | No fix listed |
| Linux kernel | = 2.6.19-rc3 | No fix listed |
| Linux kernel | = 2.6.19-rc4 | No fix listed |
| Linux kernel | = 2.6.19.1 | No fix listed |
| Linux kernel | = 2.6.19.2 | No fix listed |
| Linux kernel | = 2.6.20 | No fix listed |
| Linux kernel | = 2.6.20-rc2 | No fix listed |
| Linux kernel | = 2.6.20.1 | No fix listed |
| Linux kernel | = 2.6.20.2 | No fix listed |
References
- git.kernel.org
- git.kernel.org
- kernel.org
- kernel.org
- SUSE-SA:2008:035 vendor-advisory
- SUSE-SA:2008:038 vendor-advisory
- SUSE-SA:2008:047 vendor-advisory
- SUSE-SA:2008:048 vendor-advisory
- SUSE-SA:2008:049 vendor-advisory
- SUSE-SA:2008:052 vendor-advisory
- SUSE-SR:2008:025 vendor-advisory
- 30000 third-party-advisory
- 30580 third-party-advisory vendor-advisory
- 30644 third-party-advisory
- 30658 third-party-advisory
- 30982 third-party-advisory
- 31107 third-party-advisory
- 31836 third-party-advisory
- 32103 third-party-advisory
- 32104 third-party-advisory
- 32370 third-party-advisory
- 32759 third-party-advisory
- wiki.rpath.com
- DSA-1592 vendor-advisory
- MDVSA-2008:113 vendor-advisory
- MDVSA-2008:174 vendor-advisory
- 20080611 rPSA-2008-0189-1 kernel xen mailing-list
- 29589 patch vdb-entry
- 1020210 vdb-entry
- USN-625-1 vendor-advisory
- ADV-2008-1770 vdb-entry
- bugzilla.redhat.com
- linux-kernel-ber-decoder-bo(42921) vdb-entry
- FEDORA-2008-5308 vendor-advisory