CVE-2008-5395: Buffer Overflow
Published Dec 9, 2008
·Updated
The pariscshowstack function in arch/parisc/kernel/traps.c in the Linux kernel before 2.6.28-rc7 on PA-RISC allows local users to cause a denial of service (system crash) via vectors associated with an attempt to unwind a stack that contains userspace addresses.
Affected Software
118 affected components
HP Pa-risc
HP Pa-risc
Linux Linux kernel<=2.6.28
Linux Linux kernel=2.2.27
Linux Linux kernel=2.4.36
Linux Linux kernel=2.4.36.1
Linux Linux kernel=2.4.36.2
Linux Linux kernel=2.4.36.3
Linux Linux kernel=2.4.36.4
Linux Linux kernel=2.4.36.5
Linux Linux kernel=2.4.36.6
Linux Linux kernel=2.6
Linux Linux kernel=2.6.18
Linux Linux kernel=2.6.18-rc1
Linux Linux kernel=2.6.18-rc2
Linux Linux kernel=2.6.18-rc3
Linux Linux kernel=2.6.18-rc4
Linux Linux kernel=2.6.18-rc5
Linux Linux kernel=2.6.18-rc6
Linux Linux kernel=2.6.18-rc7
Linux Linux kernel=2.6.19.4
Linux Linux kernel=2.6.19.5
Linux Linux kernel=2.6.19.6
Linux Linux kernel=2.6.19.7
Linux Linux kernel=2.6.20.16
Linux Linux kernel=2.6.20.17
Linux Linux kernel=2.6.20.18
Linux Linux kernel=2.6.20.19
Linux Linux kernel=2.6.20.20
Linux Linux kernel=2.6.20.21
Linux Linux kernel=2.6.21.5
Linux Linux kernel=2.6.21.6
Linux Linux kernel=2.6.21.7
Linux Linux kernel=2.6.22
Linux Linux kernel=2.6.22.1
Linux Linux kernel=2.6.22.2
Linux Linux kernel=2.6.22.8
Linux Linux kernel=2.6.22.9
Linux Linux kernel=2.6.22.10
Linux Linux kernel=2.6.22.11
Linux Linux kernel=2.6.22.12
Linux Linux kernel=2.6.22.13
Linux Linux kernel=2.6.22.14
Linux Linux kernel=2.6.22.15
Linux Linux kernel=2.6.22.17
Linux Linux kernel=2.6.22.18
Linux Linux kernel=2.6.22.19
Linux Linux kernel=2.6.22.20
Linux Linux kernel=2.6.22.21
Linux Linux kernel=2.6.22.22
Linux Linux kernel=2.6.22_rc1
Linux Linux kernel=2.6.22_rc7
Linux Linux kernel=2.6.23
Linux Linux kernel=2.6.23.8
Linux Linux kernel=2.6.23.9
Linux Linux kernel=2.6.23.10
Linux Linux kernel=2.6.23.11
Linux Linux kernel=2.6.23.12
Linux Linux kernel=2.6.23.13
Linux Linux kernel=2.6.23.15
Linux Linux kernel=2.6.23.16
Linux Linux kernel=2.6.23.17
Linux Linux kernel=2.6.23_rc1
Linux Linux kernel=2.6.24
Linux Linux kernel=2.6.24.1
Linux Linux kernel=2.6.24.2
Linux Linux kernel=2.6.24.3
Linux Linux kernel=2.6.24.4
Linux Linux kernel=2.6.24.5
Linux Linux kernel=2.6.24.6
Linux Linux kernel=2.6.24.7
Linux Linux kernel=2.6.24_rc1
Linux Linux kernel=2.6.24_rc4
Linux Linux kernel=2.6.24_rc5
Linux Linux kernel=2.6.25
Linux Linux kernel=2.6.25
Linux Linux kernel=2.6.25.1
Linux Linux kernel=2.6.25.1
Linux Linux kernel=2.6.25.2
Linux Linux kernel=2.6.25.2
Linux Linux kernel=2.6.25.3
Linux Linux kernel=2.6.25.3
Linux Linux kernel=2.6.25.4
Linux Linux kernel=2.6.25.4
Linux Linux kernel=2.6.25.5
Linux Linux kernel=2.6.25.5
Linux Linux kernel=2.6.25.6
Linux Linux kernel=2.6.25.6
Linux Linux kernel=2.6.25.7
Linux Linux kernel=2.6.25.7
Linux Linux kernel=2.6.25.8
Linux Linux kernel=2.6.25.8
Linux Linux kernel=2.6.25.9
Linux Linux kernel=2.6.25.9
Linux Linux kernel=2.6.25.10
Linux Linux kernel=2.6.25.10
Linux Linux kernel=2.6.25.11
Linux Linux kernel=2.6.25.11
Linux Linux kernel=2.6.25.12
Linux Linux kernel=2.6.25.12
Linux Linux kernel=2.6.25.13
Linux Linux kernel=2.6.25.14
Linux Linux kernel=2.6.25.15
Linux Linux kernel=2.6.25.16
Linux Linux kernel=2.6.25.17
Linux Linux kernel=2.6.26
Linux Linux kernel=2.6.26.1
Linux Linux kernel=2.6.26.2
Linux Linux kernel=2.6.26.3
Linux Linux kernel=2.6.26.4
Linux Linux kernel=2.6.26.5
Linux Linux kernel=2.6.27
Linux Linux kernel=2.6.28-rc1
Linux Linux kernel=2.6.28-rc2
Linux Linux kernel=2.6.28-rc3
Linux Linux kernel=2.6.28-rc4
Linux Linux kernel=2.6.28-rc5
Linux Linux kernel=2.6.28-rc6
Event History
Dec 9, 2008
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
12:30 AM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2008-5395?
CVE-2008-5395 is classified as a high severity vulnerability due to its potential to cause a denial of service.
2
How do I fix CVE-2008-5395?
To mitigate CVE-2008-5395, upgrade the Linux kernel to a version higher than 2.6.28-rc7.
3
Who is affected by CVE-2008-5395?
Local users on Linux kernel versions before 2.6.28-rc7, specifically on PA-RISC architectures, are affected by CVE-2008-5395.
4
What does CVE-2008-5395 do?
CVE-2008-5395 allows local users to trigger a denial of service condition by causing a system crash through invalid stack unwinding.
5
When was CVE-2008-5395 disclosed?
CVE-2008-5395 was disclosed in October 2008, with a formal report published on various security platforms.