CVE-2008-1852: Null Pointer Dereference

Published Apr 16, 2008

Updated

ovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.51, 7.53, and possibly other versions allows remote attackers to cause a denial of service (crash) via certain requests that specify a large number of sub-arguments, which triggers a NULL pointer dereference due to memory allocation failure.

Affected Software

2 affected components

Hewlett Packard OpenView Network Node Manager=7.51

Hewlett Packard OpenView Network Node Manager=7.53

Event History

Apr 16, 2008

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-1852?

CVE-2008-1852 is classified as a denial of service vulnerability, allowing remote attackers to crash the application.

Which versions of software are affected by CVE-2008-1852?

CVE-2008-1852 affects HP OpenView Network Node Manager versions 7.51 and 7.53.

How do I fix CVE-2008-1852?

To mitigate CVE-2008-1852, apply the latest updates or patches provided by HP for OpenView Network Node Manager.

What kind of attack does CVE-2008-1852 facilitate?

CVE-2008-1852 enables remote attackers to execute a denial of service attack through specific malformed requests.

What could be the impact of exploiting CVE-2008-1852?

Exploiting CVE-2008-1852 can lead to downtime or unavailability of the HP OpenView Network Node Manager service.