7.2 - CVE-2008-2358

Executive Summary

This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.

Informations
Name	CVE-2008-2358	First vendor Publication	2008-06-09
Vendor	Cve	Last vendor Modification	2017-09-29

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:L/AC:L/Au:N/C:C/I:C/A:C)
Cvss Base Score	7.2	Attack Range	Local
Cvss Impact Score	10	Attack Complexity	Low
Cvss Expoit Score	3.9	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Integer overflow in the dccp_feat_change function in net/dccp/feat.c in the Datagram Congestion Control Protocol (DCCP) subsystem in the Linux kernel 2.6.18, and 2.6.17 through 2.6.20, allows local users to gain privileges via an invalid feature length, which leads to a heap-based buffer overflow.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2358

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-189	Numeric Errors (CWE/SANS Top 25)

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:18678

Oval ID:	oval:org.mitre.oval:def:18678
Title:	DSA-1592-1 linux-2.6 - overflow conditions
Description:	Two vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or arbitrary code execution.
Family:	unix	Class:	patch
Reference(s):	DSA-1592-1 CVE-2008-1673 CVE-2008-2358	Version:	7
Platform(s):	Debian GNU/Linux 4.0	Product(s):	linux-2.6
Definition Synopsis:
Debian GNU/Linux 4.0 is installed. AND linux-2.6 DPKG is earlier than 2.6.18.dfsg.1-18etch6

Definition Id: oval:org.mitre.oval:def:8118

Oval ID:	oval:org.mitre.oval:def:8118
Title:	DSA-1592 linux-2.6 -- heap overflow
Description:	Two vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or arbitrary code execution. The Common Vulnerabilities and Exposures project identifies the following problems: Wei Wang from McAfee reported a potential heap overflow in the ASN.1 decode code that is used by the SNMP NAT and CIFS subsystem. Exploitation of this issue may lead to arbitrary code execution. This issue is not believed to be exploitable with the pre-built kernel images provided by Debian, but it might be an issue for custom images built from the Debian-provided source package. Brandon Edwards of McAfee Avert labs discovered an issue in the DCCP subsystem. Due to missing feature length checks it is possible to cause an overflow that may result in remote arbitrary code execution.
Family:	unix	Class:	patch
Reference(s):	DSA-1592 CVE-2008-1673 CVE-2008-2358	Version:	5
Platform(s):	Debian GNU/Linux 4.0	Product(s):	linux-2.6
Definition Synopsis:
Debian GNU/Linux 4.0 is installed. Architecture section Architecture independent section Installed architecture is all AND Packages section linux-support-2.6.18-6 is earlier than 2.6.18.dfsg.1-18etch6 AND linux-patch-debian-2.6.18 is earlier than 2.6.18.dfsg.1-18etch6 AND linux-source-2.6.18 is earlier than 2.6.18.dfsg.1-18etch6 AND linux-manual-2.6.18 is earlier than 2.6.18.dfsg.1-18etch6 AND linux-tree-2.6.18 is earlier than 2.6.18.dfsg.1-18etch6 AND linux-doc-2.6.18 is earlier than 2.6.18.dfsg.1-18etch6 OR Architecture dependent section Installed architecture is s390 AND Packages section linux-headers-2.6.18-6-all is earlier than 2.6.18.dfsg.1-18etch6 AND linux-headers-2.6.18-6-vserver-s390x is earlier than 2.6.18.dfsg.1-18etch6 AND linux-headers-2.6.18-6-s390 is earlier than 2.6.18.dfsg.1-18etch6 AND linux-image-2.6.18-6-s390-tape is earlier than 2.6.18.dfsg.1-18etch6 AND linux-image-2.6.18-6-s390x is earlier than 2.6.18.dfsg.1-18etch6 AND linux-image-2.6.18-6-vserver-s390x is earlier than 2.6.18.dfsg.1-18etch6 AND linux-image-2.6.18-6-s390 is earlier than 2.6.18.dfsg.1-18etch6 AND linux-headers-2.6.18-6-vserver is earlier than 2.6.18.dfsg.1-18etch6 AND linux-headers-2.6.18-6-all-s390 is earlier than 2.6.18.dfsg.1-18etch6 AND linux-headers-2.6.18-6 is earlier than 2.6.18.dfsg.1-18etch6 AND linux-headers-2.6.18-6-s390x is earlier than 2.6.18.dfsg.1-18etch6 OR Architecture dependent section Installed architecture is amd64 AND Packages section linux-image-2.6.18-6-xen-amd64 is earlier than 2.6.18.dfsg.1-18etch6 AND linux-headers-2.6.18-6-all is earlier than 2.6.18.dfsg.1-18etch6 AND fai-kernels is earlier than 1.17+etch.18etch6 AND xen-linux-system-2.6.18-6-xen-amd64 is earlier than 2.6.18.dfsg.1-18etch6 AND linux-image-2.6.18-6-amd64 is earlier than 2.6.18.dfsg.1-18etch6 AND linux-image-2.6.18-6-vserver-amd64 is earlier than 2.6.18.dfsg.1-18etch6 AND linux-image-2.6.18-6-xen-vserver-amd64 is earlier than 2.6.18.dfsg.1-18etch6 AND linux-headers-2.6.18-6-xen-amd64 is earlier than 2.6.18.dfsg.1-18etch6 AND xen-linux-system-2.6.18-6-xen-vserver-amd64 is earlier than 2.6.18.dfsg.1-18etch6 AND linux-headers-2.6.18-6-amd64 is earlier than 2.6.18.dfsg.1-18etch6 AND linux-headers-2.6.18-6-xen is earlier than 2.6.18.dfsg.1-18etch6 AND linux-headers-2.6.18-6-xen-vserver-amd64 is earlier than 2.6.18.dfsg.1-18etch6 AND linux-modules-2.6.18-6-xen-amd64 is earlier than 2.6.18.dfsg.1-18etch6 AND linux-headers-2.6.18-6-vserver-amd64 is earlier than 2.6.18.dfsg.1-18etch6 AND linux-headers-2.6.18-6-all-amd64 is earlier than 2.6.18.dfsg.1-18etch6 AND linux-headers-2.6.18-6 is earlier than 2.6.18.dfsg.1-18etch6 AND linux-headers-2.6.18-6-vserver is earlier than 2.6.18.dfsg.1-18etch6 AND linux-headers-2.6.18-6-xen-vserver is earlier than 2.6.18.dfsg.1-18etch6 AND linux-modules-2.6.18-6-xen-vserver-amd64 is earlier than 2.6.18.dfsg.1-18etch6 OR Supported platform section Installed architecture is hppa AND Packages section linux-headers-2.6.18-6-parisc64 is earlier than 2.6.18.dfsg.1-18etch6 AND linux-headers-2.6.18-6-all is earlier than 2.6.18.dfsg.1-18etch6 AND linux-image-2.6.18-6-parisc64-smp is earlier than 2.6.18.dfsg.1-18etch6 AND linux-headers-2.6.18-6-parisc is earlier than 2.6.18.dfsg.1-18etch6 AND linux-headers-2.6.18-6-all-hppa is earlier than 2.6.18.dfsg.1-18etch6 AND linux-headers-2.6.18-6-parisc64-smp is earlier than 2.6.18.dfsg.1-18etch6 AND linux-headers-2.6.18-6-parisc-smp is earlier than 2.6.18.dfsg.1-18etch6 AND linux-image-2.6.18-6-parisc64 is earlier than 2.6.18.dfsg.1-18etch6 AND linux-headers-2.6.18-6 is earlier than 2.6.18.dfsg.1-18etch6 AND linux-image-2.6.18-6-parisc is earlier than 2.6.18.dfsg.1-18etch6 AND linux-image-2.6.18-6-parisc-smp is earlier than 2.6.18.dfsg.1-18etch6

Definition Id: oval:org.mitre.oval:def:9644

Oval ID:	oval:org.mitre.oval:def:9644
Title:	Integer overflow in the dccp_feat_change function in net/dccp/feat.c in the Datagram Congestion Control Protocol (DCCP) subsystem in the Linux kernel 2.6.18, and 2.6.17 through 2.6.20, allows local users to gain privileges via an invalid feature length, which leads to a heap-based buffer overflow.
Description:	Integer overflow in the dccp_feat_change function in net/dccp/feat.c in the Datagram Congestion Control Protocol (DCCP) subsystem in the Linux kernel 2.6.18, and 2.6.17 through 2.6.20, allows local users to gain privileges via an invalid feature length, which leads to a heap-based buffer overflow.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2008-2358	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section kernel-kdump is earlier than 0:2.6.18-92.1.6.el5 AND kernel-debug is earlier than 0:2.6.18-92.1.6.el5 AND kernel-xen is earlier than 0:2.6.18-92.1.6.el5 AND kernel-headers is earlier than 0:2.6.18-92.1.6.el5 AND kernel-kdump-devel is earlier than 0:2.6.18-92.1.6.el5 AND kernel-xen-devel is earlier than 0:2.6.18-92.1.6.el5 AND kernel is earlier than 0:2.6.18-92.1.6.el5 AND kernel-PAE-devel is earlier than 0:2.6.18-92.1.6.el5 AND kernel-devel is earlier than 0:2.6.18-92.1.6.el5 AND kernel-PAE is earlier than 0:2.6.18-92.1.6.el5 AND kernel-debug-devel is earlier than 0:2.6.18-92.1.6.el5 AND kernel-doc is earlier than 0:2.6.18-92.1.6.el5

CPE : Common Platform Enumeration

Type	Description	Count
Os	Linux Linux Kernel cpe:2.3:o:linux:linux_kernel:2.6.20:-:::::: cpe:2.3:o:linux:linux_kernel:2.6.19:-:::::: cpe:2.3:o:linux:linux_kernel:2.6.18:-:::::: cpe:2.3:o:linux:linux_kernel:2.6.17:-::::::	4

OpenVAS Exploits

Date	Description
2009-04-09	Name : Mandriva Update for kernel MDVSA-2008:112 (kernel) File : nvt/gb_mandriva_MDVSA_2008_112.nasl
2009-04-09	Name : Mandriva Update for kernel MDVSA-2008:167 (kernel) File : nvt/gb_mandriva_MDVSA_2008_167.nasl
2009-03-23	Name : Ubuntu Update for linux, linux-source-2.6.15/20/22 vulnerabilities USN-625-1 File : nvt/gb_ubuntu_USN_625_1.nasl
2009-03-06	Name : RedHat Update for kernel RHSA-2008:0519-01 File : nvt/gb_RHSA-2008_0519-01_kernel.nasl
2009-02-17	Name : Fedora Update for kernel FEDORA-2008-5893 File : nvt/gb_fedora_2008_5893_kernel_fc9.nasl
2009-01-23	Name : SuSE Update for kernel SUSE-SA:2008:030 File : nvt/gb_suse_2008_030.nasl
2008-06-11	Name : Debian Security Advisory DSA 1592-1 (linux-2.6) File : nvt/deb_1592_1.nasl
2008-06-11	Name : Debian Security Advisory DSA 1592-2 (linux-2.6) File : nvt/deb_1592_2.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
46309	Linux Kernel Datagram Congestion Control Protocol (DCCP) Subsystem Remote Ove...

Nessus® Vulnerability Scanner

Date	Description
2014-11-26	Name : The remote OracleVM host is missing one or more security updates. File : oraclevm_OVMSA-2008-2005.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2008-0519.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20080625_kernel_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2010-01-06	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2008-0519.nasl - Type : ACT_GATHER_INFO
2009-04-23	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2008-112.nasl - Type : ACT_GATHER_INFO
2009-04-23	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2008-167.nasl - Type : ACT_GATHER_INFO
2008-07-17	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-625-1.nasl - Type : ACT_GATHER_INFO
2008-07-08	Name : The remote Fedora host is missing a security update. File : fedora_2008-5893.nasl - Type : ACT_GATHER_INFO
2008-07-02	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2008-0519.nasl - Type : ACT_GATHER_INFO
2008-06-24	Name : The remote openSUSE host is missing a security update. File : suse_kernel-5336.nasl - Type : ACT_GATHER_INFO
2008-06-16	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1592.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

Source	Url
BID	http://www.securityfocus.com/bid/29603
CONFIRM	https://bugzilla.redhat.com/show_bug.cgi?id=447389
DEBIAN	http://www.debian.org/security/2008/dsa-1592
FEDORA	https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00082.html
MANDRIVA	http://www.mandriva.com/security/advisories?name=MDVSA-2008:112 http://www.mandriva.com/security/advisories?name=MDVSA-2008:167
OVAL	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
REDHAT	http://www.redhat.com/support/errata/RHSA-2008-0519.html
SECTRACK	http://www.securitytracker.com/id?1020211
SECUNIA	http://secunia.com/advisories/30000 http://secunia.com/advisories/30818 http://secunia.com/advisories/30849 http://secunia.com/advisories/30920 http://secunia.com/advisories/31107
SUSE	http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html
UBUNTU	http://www.ubuntu.com/usn/usn-625-1
XF	https://exchange.xforce.ibmcloud.com/vulnerabilities/43034

Alert History

If you want to see full details history, please login or register.

Date	Informations
2024-02-02 01:08:46	Multiple Updates
2024-02-01 12:02:39	Multiple Updates
2023-09-05 12:08:10	Multiple Updates
2023-09-05 01:02:30	Multiple Updates
2023-09-02 12:08:16	Multiple Updates
2023-09-02 01:02:31	Multiple Updates
2023-08-12 12:09:42	Multiple Updates
2023-08-12 01:02:31	Multiple Updates
2023-08-11 12:08:20	Multiple Updates
2023-08-11 01:02:36	Multiple Updates
2023-08-06 12:07:58	Multiple Updates
2023-08-06 01:02:32	Multiple Updates
2023-08-04 12:08:04	Multiple Updates
2023-08-04 01:02:35	Multiple Updates
2023-07-14 12:08:02	Multiple Updates
2023-07-14 01:02:33	Multiple Updates
2023-03-29 01:09:05	Multiple Updates
2023-03-28 12:02:39	Multiple Updates
2022-10-11 12:07:08	Multiple Updates
2022-10-11 01:02:23	Multiple Updates
2021-05-04 12:07:32	Multiple Updates
2021-04-22 01:07:55	Multiple Updates
2020-05-23 00:21:43	Multiple Updates
2017-09-29 09:23:33	Multiple Updates
2017-08-08 09:24:07	Multiple Updates
2016-04-26 17:25:30	Multiple Updates
2014-11-27 13:27:20	Multiple Updates
2014-02-17 10:45:05	Multiple Updates
2013-05-11 00:17:41	Multiple Updates

Global Informations

Type	Count
CWE ID(s)	1
Oval ID(s)	3
CPE ID(s)	4
Sources(s)	17
osvdb(s)	1
Openvas Exploit(s)	8
Nessus® Exploit(s)	11

	Related
10	USN-625-1
10	DSA-1592
7.8	MDVSA-2008:167
7.2	RHSA-2008:0519
7.2	MDVSA-2008:112
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 5 more Alert(s)