CVE-2008-5025: Buffer Overflow

Published Nov 10, 2008
·
Updated

From: Eric Sesterhenn: Fix a stack corruption caused by a corrupted hfs filesystem. If the catalog name length is corrupted the memcpy overwrites the catalog btree structure. Since the field is limited to HFSNAMELEN bytes in the structure and the file format, we throw an error if it is too long.

Other sources

Stack-based buffer overflow in the hfscatfindbrec function in fs/hfs/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to cause a denial of service (memory corruption or system crash) via an hfs filesystem image with an invalid catalog namelength field, a related issue to CVE-2008-4933.

— MITRE

Affected Software

110 affected components
Linux Linux kernel=2.6.25.4
Linux Linux kernel=2.6.25.11
Linux Linux kernel=2.6.18-rc3
Linux Linux kernel=2.6.25.9
Linux Linux kernel=2.6.22.15
Linux Linux kernel=2.6.24.7
Linux Linux kernel=2.6.18-rc2
Linux Linux kernel=2.6.23.13
Linux Linux kernel=2.6.24.2
Linux Linux kernel=2.4.36.6
Linux Linux kernel=2.6.18-rc5
Linux Linux kernel=2.6.26.5
Linux Linux kernel<=2.6.28
Linux Linux kernel=2.6.18-rc4
Linux Linux kernel=2.6.22.21
Linux Linux kernel=2.6.25.12
Linux Linux kernel=2.6.25.5
Linux Linux kernel=2.6.23.8
Linux Linux kernel=2.6.25
Linux Linux kernel=2.6.22.12
Linux Linux kernel=2.6.25.8
Linux Linux kernel=2.6.21.6
Linux Linux kernel=2.4.36.2
Linux Linux kernel=2.6.22.1
Linux Linux kernel=2.6.23.16
Linux Linux kernel=2.6.24.1
Linux Linux kernel=2.6.25.6
Linux Linux kernel=2.6.22
Linux Linux kernel=2.6.26
Linux Linux kernel=2.6.26.3
Linux Linux kernel=2.6.20.16
Linux Linux kernel=2.6.25.9
Linux Linux kernel=2.6.27
Linux Linux kernel=2.6.19.4
Linux Linux kernel=2.6.25.13
Linux Linux kernel=2.6.20.21
Linux Linux kernel=2.6.25.7
Linux Linux kernel=2.4.36.1
Linux Linux kernel=2.6.25.3
Linux Linux kernel=2.6.24
Linux Linux kernel=2.6.26.2
Linux Linux kernel=2.6.20.17
Linux Linux kernel=2.6.21.5
Linux Linux kernel=2.6.25.15
Linux Linux kernel=2.6.24_rc4
Linux Linux kernel=2.6.23.15
Linux Linux kernel=2.6.23.10
Linux Linux kernel=2.4.36.4
Linux Linux kernel=2.6.26.1
Linux Linux kernel=2.6.20.20
Linux Linux kernel=2.6.22.18
Linux Linux kernel=2.6.25.8
Linux Linux kernel=2.4.36.3
Linux Linux kernel=2.6.22.20
Linux Linux kernel=2.6.20.18
Linux Linux kernel=2.6.23.9
Linux Linux kernel=2.6.25.2
Linux Linux kernel=2.6.25.1
Linux Linux kernel=2.6.24.4
Linux Linux kernel=2.6.25.16
Linux Linux kernel=2.6.22.9
Linux Linux kernel=2.6.25.17
Linux Linux kernel=2.6.22.13
Linux Linux kernel=2.6.19.7
Linux Linux kernel=2.6.24.5
Linux Linux kernel=2.6.24_rc1
Linux Linux kernel=2.6.20.19
Linux Linux kernel=2.6.22.17
Linux Linux kernel=2.6.25.10
Linux Linux kernel=2.6.22.11
Linux Linux kernel=2.6.23
Linux Linux kernel=2.6.22.10
Linux Linux kernel=2.6.23.17
Linux Linux kernel=2.6.25.1
Linux Linux kernel=2.6.25.4
Linux Linux kernel=2.6.25.3
Linux Linux kernel=2.6.21.7
Linux Linux kernel=2.6.23_rc1
Linux Linux kernel=2.6.22.22
Linux Linux kernel=2.6.18-rc7
Linux Linux kernel=2.6.25.5
Linux Linux kernel=2.6.24.6
Linux Linux kernel=2.6.22_rc7
Linux Linux kernel=2.4.36
Linux Linux kernel=2.6.23.12
Linux Linux kernel=2.6.24_rc5
Linux Linux kernel=2.6.19.6
Linux Linux kernel=2.6.25.11
Linux Linux kernel=2.6.18-rc6
Linux Linux kernel=2.6.22.8
Linux Linux kernel=2.6.19.5
Linux Linux kernel=2.6.18
Linux Linux kernel=2.4.36.5
Linux Linux kernel=2.6.22.2
Linux Linux kernel=2.2.27
Linux Linux kernel=2.6.22.19
Linux Linux kernel=2.6.24.3
Linux Linux kernel=2.6.22_rc1
Linux Linux kernel=2.6.25
Linux Linux kernel=2.6.25.2
Linux Linux kernel=2.6.25.7
Linux Linux kernel=2.6.25.14
Linux Linux kernel=2.6.26.4
Linux Linux kernel=2.6.25.12
Linux Linux kernel=2.6.25.6
Linux Linux kernel=2.6.18-rc1
Linux Linux kernel=2.6.23.11
Linux Linux kernel=2.6.22.14
Linux Linux kernel=2.6.25.10
Linux Linux kernel=2.6

Event History

Nov 10, 2008
Data Sourced
05:52 AM
DescriptionSeverityAffected Software
Nov 17, 2008
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description

Frequently Asked Questions

1

What is the severity of CVE-2008-5025?

The severity of CVE-2008-5025 is classified as high due to the potential for stack corruption.

2

How do I fix CVE-2008-5025?

To fix CVE-2008-5025, you should upgrade your Linux kernel to a version that includes the fix for this vulnerability.

3

What does CVE-2008-5025 affect?

CVE-2008-5025 affects specific versions of the Linux kernel, primarily those prior to 2.6.28.

4

What are the potential impacts of CVE-2008-5025?

The potential impacts of CVE-2008-5025 include system crashes and denial of service due to stack corruption.

5

Is there a workaround for CVE-2008-5025?

Currently, there is no known workaround for CVE-2008-5025, so updating the kernel is the recommended course of action.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203