CVE-2008-1948: Buffer Overflow

Published May 21, 2008
·
Updated

The gnutlsservernamerecvparams function in lib/extservername.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 does not properly calculate the number of Server Names in a TLS 1.0 Client Hello message during extension handling, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a zero value for the length of Server Names, which leads to a buffer overflow in session resumption data in the packsecurityparameters function, aka GNUTLS-SA-2008-1-1.

Affected Software

105 affected components
GNU GnuTLS=2.3.5
GNU GnuTLS=1.6.0
GNU GnuTLS=2.0.0
GNU GnuTLS=1.5.0
GNU GnuTLS=1.2.8
GNU GnuTLS=1.1.14
GNU GnuTLS=2.3.4
GNU GnuTLS=1.7.3
GNU GnuTLS=1.4.1
GNU GnuTLS=1.4.3
GNU GnuTLS=1.2.11
GNU GnuTLS=1.1.21
GNU GnuTLS=1.7.5
GNU GnuTLS=1.7.11
GNU GnuTLS=1.0.20
GNU GnuTLS=1.2.5
GNU GnuTLS=2.2.4
GNU GnuTLS=1.2.4
GNU GnuTLS=1.3.1
GNU GnuTLS=1.0.24
GNU GnuTLS=1.7.15
GNU GnuTLS=1.6.1
GNU GnuTLS=1.0.21
GNU GnuTLS=1.4.2
GNU GnuTLS=1.7.8
GNU GnuTLS=1.7.0
GNU GnuTLS=2.1.0
GNU GnuTLS=2.3.1
GNU GnuTLS=2.2.5
GNU GnuTLS=2.1.1
GNU GnuTLS=2.3.8
GNU GnuTLS=1.7.18
GNU GnuTLS=1.1.20
GNU GnuTLS=2.1.7
GNU GnuTLS=2.1.4
GNU GnuTLS=1.2.10
GNU GnuTLS=1.5.3
GNU GnuTLS=1.1.22
GNU GnuTLS=1.6.3
GNU GnuTLS=2.1.6
GNU GnuTLS=1.4.5
GNU GnuTLS=1.5.1
GNU GnuTLS=1.4.0
GNU GnuTLS=1.7.4
GNU GnuTLS=1.7.13
GNU GnuTLS=2.3.2
GNU GnuTLS=2.3.9
GNU GnuTLS=2.2.2
GNU GnuTLS=2.2.0
GNU GnuTLS=2.3.11
GNU GnuTLS=1.3.4
GNU GnuTLS=1.0.19
GNU GnuTLS=1.7.2
GNU GnuTLS=1.2.1
GNU GnuTLS=1.1.19
GNU GnuTLS=2.0.4
GNU GnuTLS=1.1.18
GNU GnuTLS=1.5.4
GNU GnuTLS=1.7.9
GNU GnuTLS=2.1.3
GNU GnuTLS=1.7.10
GNU GnuTLS=1.1.13
GNU GnuTLS=2.3.7
GNU GnuTLS=2.0.3
GNU GnuTLS=1.2.2
GNU GnuTLS=1.7.19
GNU GnuTLS=1.5.5
GNU GnuTLS=1.2.0
GNU GnuTLS=1.0.18
GNU GnuTLS=1.2.7
GNU GnuTLS=1.3.2
GNU GnuTLS=1.0.25
GNU GnuTLS=1.1.15
GNU GnuTLS=2.1.2
GNU GnuTLS=1.0.23
GNU GnuTLS=1.3.0
GNU GnuTLS=1.3.5
GNU GnuTLS=1.7.14
GNU GnuTLS=1.1.23
GNU GnuTLS=1.2.3
GNU GnuTLS=1.2.6
GNU GnuTLS=2.3.6
GNU GnuTLS=1.2.9
GNU GnuTLS=1.7.17
GNU GnuTLS=2.3.3
GNU GnuTLS=2.1.8
GNU GnuTLS=1.7.7
GNU GnuTLS=2.0.1
GNU GnuTLS=1.7.6
GNU GnuTLS=2.2.1
GNU GnuTLS=2.1.5
GNU GnuTLS=1.7.1
GNU GnuTLS=1.5.2
GNU GnuTLS=1.7.16
GNU GnuTLS=1.7.12
GNU GnuTLS=1.1.16
GNU GnuTLS=2.3.10
GNU GnuTLS=1.0.22
GNU GnuTLS=2.0.2
GNU GnuTLS=2.3.0
GNU GnuTLS=1.6.2
GNU GnuTLS=2.2.3
GNU GnuTLS=1.4.4
GNU GnuTLS=1.1.17
GNU GnuTLS=1.3.3

Remediation

Patch Available

http://www.openwall.com/lists/oss-security/2008/05/20/2

Patch Available

http://www.securityfocus.com/bid/29292

Event History

May 21, 2008
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description

Frequently Asked Questions

1

What is the severity of CVE-2008-1948?

The severity of CVE-2008-1948 is classified as medium, due to its potential to cause a denial of service.

2

How do I fix CVE-2008-1948?

To fix CVE-2008-1948, upgrade to GnuTLS version 2.2.4 or later.

3

What software versions are affected by CVE-2008-1948?

CVE-2008-1948 affects GnuTLS versions prior to 2.2.4, including versions 1.0.18 through 1.5.5.

4

Can CVE-2008-1948 be exploited remotely?

Yes, CVE-2008-1948 can be exploited by remote attackers to trigger a denial of service.

5

Is CVE-2008-1948 a code execution vulnerability?

No, CVE-2008-1948 is not a code execution vulnerability; it results in denial of service.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203