CVE-2008-3247: Buffer Overflow
First published: Thu Jul 24 2008(Updated: )
The LDT implementation in the Linux kernel 2.6.25.x before 2.6.25.11 on x86_64 platforms uses an incorrect size for ldt_desc, which allows local users to cause a denial of service (system crash) or possibly gain privileges via unspecified vectors.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Linux kernel | =2.6.25.4 | |
| Linux Linux kernel | =2.6.25.11 | |
| Linux Linux kernel | =2.6.25.9 | |
| Linux Linux kernel | =2.6.25.12 | |
| Linux Linux kernel | =2.6.25 | |
| Linux Linux kernel | =2.6.25.8 | |
| Linux Linux kernel | =2.6.25.6 | |
| Linux Linux kernel | =2.6.25.7 | |
| Linux Linux kernel | =2.6.25.2 | |
| Linux Linux kernel | =2.6.25.1 | |
| Linux Linux kernel | =2.6.25.3 | |
| Linux Linux kernel | =2.6.25.5 | |
| Linux Linux kernel | =2.6.25.10 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26
- http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00009.html
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.11
- http://secunia.com/advisories/31202
- http://secunia.com/advisories/31172
- http://www.securitytracker.com/id?1020544
- http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git;a=commit;h=74454a6a286bfce4bb23d89bd465f856fa6a6e19
- http://www.securityfocus.com/bid/30351
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43979
- http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git%3Ba=commit%3Bh=74454a6a286bfce4bb23d89bd465f856fa6a6e19
- collector/nvd-historical
- collector/nvd-index
- collector/nvd-api
- agent/references
- agent/severity
- agent/weakness
- agent/author
- agent/description
- agent/type
- agent/last-modified-date
- agent/remedy
- agent/softwarecombine
- agent/first-publish-date
- agent/event
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/linux
- canonical/linux linux kernel
- version/linux linux kernel/2.6.25.4
- version/linux linux kernel/2.6.25.11
- version/linux linux kernel/2.6.25.9
- version/linux linux kernel/2.6.25.12
- version/linux linux kernel/2.6.25
- version/linux linux kernel/2.6.25.8
- version/linux linux kernel/2.6.25.6
- version/linux linux kernel/2.6.25.7
- version/linux linux kernel/2.6.25.2
- version/linux linux kernel/2.6.25.1
- version/linux linux kernel/2.6.25.3
- version/linux linux kernel/2.6.25.5
- version/linux linux kernel/2.6.25.10