CVE Vulnerability

CVE-2008-5701

Array index error in arch/mips/kernel/scall64-o32.S in the Linux kernel before 2.6.28-rc8 on 64-bit MIPS platforms allows local users to cause a denial of service (system crash) via an o32 syscall with a small syscall number, which leads to an attempted read operation outside the bounds of the syscall table.

4.7 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 3.4 / Impact : 6.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

Scope

References
Link Resource
http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git;a=commit;h=e807f9574e37a3f202e677feaaad1b7c5d2c0db8 Vendor Advisory
http://openwall.com/lists/oss-security/2008/12/09/1 Mailing List Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.28-rc8 Vendor Advisory
http://www.securityfocus.com/bid/32716 Third Party Advisory VDB Entry
http://www.debian.org/security/2009/dsa-1787 Third Party Advisory
http://secunia.com/advisories/34981 Third Party Advisory
http://www.debian.org/security/2009/dsa-1794 Third Party Advisory
http://secunia.com/advisories/35011 Third Party Advisory
http://secunia.com/advisories/33078 Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/47190 Third Party Advisory VDB Entry
Configurations

Configuration 1

cpe:2.3:o:linux:linux_kernel:2.6.28:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.28:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.28:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.28:rc7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.28:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.28:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.28:rc2:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*
Information

Published : 2008-12-22 03:30

Updated : 2018-11-08 08:13

NVD link : CVE-2008-5701

Mitre link : CVE-2008-5701

Products Affected
No products.
CWE
CWE-189