CVE-2008-1338: High severity perforce helix core vulnerability
Published Mar 14, 2008
·Updated
The Perforce service (p4s.exe) in Perforce Server 2007.3/143793 and earlier allows remote attackers to cause a denial of service (daemon crash) via a server-DiffFile command with an integer value within a certain range, which causes a loop until all memory is exhausted.
Affected Software
1 affected component
Perforce Perforce Server<=2007.3_143793
Event History
Mar 14, 2008
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-1338?
CVE-2008-1338 is classified as a denial of service vulnerability.
2
How do I fix CVE-2008-1338?
To fix CVE-2008-1338, upgrade to a version of Perforce Server that is newer than 2007.3_143793.
3
What impact does CVE-2008-1338 have on Perforce Server?
CVE-2008-1338 allows remote attackers to crash the Perforce Server daemon, leading to service disruption.
4
Is CVE-2008-1338 exploitable remotely?
Yes, CVE-2008-1338 can be exploited remotely via a specially crafted server-DiffFile command.
5
Which versions of Perforce Server are affected by CVE-2008-1338?
CVE-2008-1338 affects Perforce Server versions 2007.3 and earlier.