CVE-2008-4395: Buffer Overflow
Published Nov 6, 2008
·Updated
Multiple buffer overflows in the ndiswrapper module 1.53 for the Linux kernel 2.6 allow remote attackers to execute arbitrary code by sending packets over a local wireless network that specify long ESSIDs.
Affected Software
2 affected components
Ubuntu Linux kernel<=2.6.26
Linux Linux kernel=2.6
Event History
Nov 6, 2008
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Feb 17, 2026
Data Sourced
via Launchpad·05:36 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-4395?
CVE-2008-4395 has a high severity rating due to potential arbitrary code execution via buffer overflows.
2
How do I fix CVE-2008-4395?
To fix CVE-2008-4395, upgrade to a kernel version later than 2.6.26 or apply pertinent security patches.
3
Which systems are affected by CVE-2008-4395?
CVE-2008-4395 affects Linux kernel versions 2.6 and up to 2.6.26, specifically when using the ndiswrapper module.
4
Can CVE-2008-4395 be exploited remotely?
Yes, CVE-2008-4395 can be exploited remotely by attackers on the same local wireless network.
5
What is the nature of the vulnerability in CVE-2008-4395?
CVE-2008-4395 is a buffer overflow vulnerability that allows for remote code execution via specially crafted packets.