CVE-2008-3276: Integer Overflow
Description of problem: Eugene Teo reported that an integer overflow flaw was found in the Linux kernel dccpsetsockoptchange() function. The vulnerability exists due to a lack of sanitisation performed on a user-controlled integer value before the value is employed as the size argument of a memory allocation operation. An attacker may leverage this vulnerability to trigger a kernel panic on a victim's machine remotely.
Other sources
Integer overflow in the dccpsetsockoptchange function in net/dccp/proto.c in the Datagram Congestion Control Protocol (DCCP) subsystem in the Linux kernel 2.6.17-rc1 through 2.6.26.2 allows remote attackers to cause a denial of service (panic) via a crafted integer value, related to Change L and Change R options without at least one byte in the dccpsfval field.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-3276?
CVE-2008-3276 has been rated as a medium severity vulnerability due to the potential for exploitation leading to memory corruption.
How do I fix CVE-2008-3276?
To fix CVE-2008-3276, update the Linux kernel to a version that addresses this integer overflow vulnerability.
What vulnerable versions are affected by CVE-2008-3276?
CVE-2008-3276 affects several versions of the Linux kernel, including 2.6.17.x, 2.6.18.x, 2.6.20.x, 2.6.21.x, 2.6.22.x, 2.6.23.x, and 2.6.24.x.
What components in the Linux kernel are affected by CVE-2008-3276?
The vulnerability in CVE-2008-3276 specifically affects the dccp_setsockopt_change() function in the Linux kernel.
Can CVE-2008-3276 be exploited remotely?
Yes, CVE-2008-3276 could potentially be exploited remotely if an attacker sends specially crafted packets to a vulnerable service.