National Cyber-Alert System
Vulnerability Summary for CVE-2008-1673
Original release date:06/10/2008
Last revised:02/12/2009
Source:
US-CERT/NIST
Overview
The asn1 implementation in (a) the Linux kernel 2.4 before 2.4.36.6 and 2.6 before 2.6.25.5, as used in the cifs and ip_nat_snmp_basic modules; and (b) the gxsnmp package; does not properly validate length values during decoding of ASN.1 BER data, which allows remote attackers to cause a denial of service (crash) or execute arbitrary code via (1) a length greater than the working buffer, which can lead to an unspecified overflow; (2) an oid length of zero, which can lead to an off-by-one error; or (3) an indefinite length for a primitive encoding.
Impact
CVSS Severity (version 2.0):
Impact Subscore:
10.0
Exploitability Subscore:
10.0
CVSS Version 2 Metrics:
Access Vector: Network exploitable
Access Complexity: Low
Authentication: Not required to exploit
Impact Type:Allows unauthorized disclosure of information; Allows unauthorized modification; Allows disruption of service
- Official Statement from Red Hat (04/15/2009)
-
Not vulnerable. This issue did not have a security consequence for the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, and 5, and as such, was treated as a bug fix. This issue could result in arbitrary code execution if the SLOB or SLUB memory allocators were used (introduced in Linux kernel versions 2.6.16 and 2.6.22 respectively). Red Hat Enterprise Linux and Red Hat Enterprise MRG use the SLAB memory allocator, which, in this case, cannot be exploited to allow arbitrary code execution. Red Hat Enterprise Linux 2.1 and Red Hat Enterprise MRG were not affected.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.
External Source: BID
Name: 29589
Type: Patch Information
External Source: FEDORA
Name: FEDORA-2008-5308
External Source: CONFIRM
Name: https://bugzilla.redhat.com/show_bug.cgi?id=443962
External Source: XF
Name: kernel-ber-decoder-bo(42921)
External Source: UBUNTU
Name: USN-625-1
External Source: BUGTRAQ
Name: 20080611 rPSA-2008-0189-1 kernel xen
External Source: MANDRIVA
Name: MDVSA-2008:174
External Source: MANDRIVA
Name: MDVSA-2008:113
External Source: VUPEN
Name: ADV-2008-1770
Type: Advisory
External Source: CONFIRM
Name: http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0189
External Source: SECUNIA
Name: 32759
External Source: SECUNIA
Name: 32104
External Source: SECUNIA
Name: 32103
External Source: SECUNIA
Name: 31836
External Source: SECUNIA
Name: 31107
External Source: SECUNIA
Name: 30658
External Source: SECUNIA
Name: 30644
External Source: SECUNIA
Name: 30580
Type: Advisory
External Source: SUSE
Name: SUSE-SR:2008:025
External Source: SUSE
Name: SUSE-SA:2008:049
External Source: SUSE
Name: SUSE-SA:2008:048
External Source: SUSE
Name: SUSE-SA:2008:047
External Source: SUSE
Name: SUSE-SA:2008:038
External Source: SUSE
Name: SUSE-SA:2008:035
External Source: CONFIRM
Name: http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.5
External Source: CONFIRM
Name: http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.6
External Source: CONFIRM
Name: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=ddb2c43594f22843e9f3153da151deaba1a834c5
External Source: CONFIRM
Name: http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git;a=commit;h=33afb8403f361919aa5c8fe1d0a4f5ddbfbbea3c
External Source: SECTRACK
Name: 1020210
External Source: SECUNIA
Name: 30000
