CVE-2008-1673

CVE Descriptions

The asn1 implementation in (a) the Linux kernel 2.4 before 2.4.36.6 and 2.6 before 2.6.25.5, as used in the cifs and ip_nat_snmp_basic modules; and (b) the gxsnmp package; does not properly validate length values during decoding of ASN.1 BER data, which allows remote attackers to cause a denial of service (crash) or execute arbitrary code via (1) a length greater than the working buffer, which can lead to an unspecified overflow; (2) an oid length of zero, which can lead to an off-by-one error; or (3) an indefinite length for a primitive encoding.

CVE Informations

Related Weaknesses

CWE-ID	Weakness Name	Source
CWE-119	Improper Restriction of Operations within the Bounds of a Memory Buffer The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Metrics

Metrics	Score	Severity	CVSS Vector	Source
V2	10		AV:N/AC:L/Au:N/C:C/I:C/A:C	nvd@nist.gov

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

EPSS First.org

Products Mentioned

Configuraton 0

Debian>>Debian_linux >> Version 4.0

Linux>>Linux_kernel >> Version 2.4.0

Linux>>Linux_kernel >> Version 2.4.1

Linux>>Linux_kernel >> Version 2.4.2

Linux>>Linux_kernel >> Version 2.4.3

Linux>>Linux_kernel >> Version 2.4.4

Linux>>Linux_kernel >> Version 2.4.5

Linux>>Linux_kernel >> Version 2.4.6

Linux>>Linux_kernel >> Version 2.4.7

Linux>>Linux_kernel >> Version 2.4.8

Linux>>Linux_kernel >> Version 2.4.9

Linux>>Linux_kernel >> Version 2.4.10

Linux>>Linux_kernel >> Version 2.4.11

Linux>>Linux_kernel >> Version 2.4.12

Linux>>Linux_kernel >> Version 2.4.13

Linux>>Linux_kernel >> Version 2.4.14

Linux>>Linux_kernel >> Version 2.4.15

Linux>>Linux_kernel >> Version 2.4.16

Linux>>Linux_kernel >> Version 2.4.17

Linux>>Linux_kernel >> Version 2.4.18

Linux>>Linux_kernel >> Version 2.4.19

Linux>>Linux_kernel >> Version 2.4.20

Linux>>Linux_kernel >> Version 2.4.21

Linux>>Linux_kernel >> Version 2.4.22

Linux>>Linux_kernel >> Version 2.4.23

Linux>>Linux_kernel >> Version 2.4.23_ow2

Linux>>Linux_kernel >> Version 2.4.24

Linux>>Linux_kernel >> Version 2.4.24_ow1

Linux>>Linux_kernel >> Version 2.4.25

Linux>>Linux_kernel >> Version 2.4.26

Linux>>Linux_kernel >> Version 2.4.27

Linux>>Linux_kernel >> Version 2.4.28

Linux>>Linux_kernel >> Version 2.4.29

Linux>>Linux_kernel >> Version 2.4.30

Linux>>Linux_kernel >> Version 2.4.31

Linux>>Linux_kernel >> Version 2.4.32

Linux>>Linux_kernel >> Version 2.4.33

Linux>>Linux_kernel >> Version 2.4.33.2

Linux>>Linux_kernel >> Version 2.4.33.3

Linux>>Linux_kernel >> Version 2.4.33.4

Linux>>Linux_kernel >> Version 2.4.33.5

Linux>>Linux_kernel >> Version 2.4.34

Linux>>Linux_kernel >> Version 2.4.35

Linux>>Linux_kernel >> Version 2.4.36

Linux>>Linux_kernel >> Version 2.4.36.1

Linux>>Linux_kernel >> Version 2.4.36.2

Linux>>Linux_kernel >> Version 2.4.36.3

Linux>>Linux_kernel >> Version 2.4.36.4

Linux>>Linux_kernel >> Version 2.4.36.5

Linux>>Linux_kernel >> Version 2.6.0

Linux>>Linux_kernel >> Version 2.6.1

Linux>>Linux_kernel >> Version 2.6.2

Linux>>Linux_kernel >> Version 2.6.10

Linux>>Linux_kernel >> Version 2.6.11

Linux>>Linux_kernel >> Version 2.6.11.4

Linux>>Linux_kernel >> Version 2.6.11.5

Linux>>Linux_kernel >> Version 2.6.11.6

Linux>>Linux_kernel >> Version 2.6.11.7

Linux>>Linux_kernel >> Version 2.6.11.8

Linux>>Linux_kernel >> Version 2.6.11.11

Linux>>Linux_kernel >> Version 2.6.11.12

Linux>>Linux_kernel >> Version 2.6.12

Linux>>Linux_kernel >> Version 2.6.12.1

Linux>>Linux_kernel >> Version 2.6.12.2

Linux>>Linux_kernel >> Version 2.6.12.3

Linux>>Linux_kernel >> Version 2.6.12.4

Linux>>Linux_kernel >> Version 2.6.12.5

Linux>>Linux_kernel >> Version 2.6.12.6

Linux>>Linux_kernel >> Version 2.6.12.12

Linux>>Linux_kernel >> Version 2.6.12.22

Linux>>Linux_kernel >> Version 2.6.13

Linux>>Linux_kernel >> Version 2.6.13.1

Linux>>Linux_kernel >> Version 2.6.13.2

Linux>>Linux_kernel >> Version 2.6.13.3

Linux>>Linux_kernel >> Version 2.6.13.4

Linux>>Linux_kernel >> Version 2.6.14

Linux>>Linux_kernel >> Version 2.6.14.1

Linux>>Linux_kernel >> Version 2.6.14.2

Linux>>Linux_kernel >> Version 2.6.14.3

Linux>>Linux_kernel >> Version 2.6.14.4

Linux>>Linux_kernel >> Version 2.6.14.5

Linux>>Linux_kernel >> Version 2.6.15

Linux>>Linux_kernel >> Version 2.6.15.1

Linux>>Linux_kernel >> Version 2.6.15.2

Linux>>Linux_kernel >> Version 2.6.15.3

Linux>>Linux_kernel >> Version 2.6.15.4

Linux>>Linux_kernel >> Version 2.6.15.5

Linux>>Linux_kernel >> Version 2.6.15.11

Linux>>Linux_kernel >> Version 2.6.16

Linux>>Linux_kernel >> Version 2.6.16.1

Linux>>Linux_kernel >> Version 2.6.16.7

Linux>>Linux_kernel >> Version 2.6.16.9

Linux>>Linux_kernel >> Version 2.6.16.11

Linux>>Linux_kernel >> Version 2.6.16.12

Linux>>Linux_kernel >> Version 2.6.16.13

Linux>>Linux_kernel >> Version 2.6.16.19

Linux>>Linux_kernel >> Version 2.6.16.23

Linux>>Linux_kernel >> Version 2.6.16.27

Linux>>Linux_kernel >> Version 2.6.17

Linux>>Linux_kernel >> Version 2.6.17.1

Linux>>Linux_kernel >> Version 2.6.17.2

Linux>>Linux_kernel >> Version 2.6.17.3

Linux>>Linux_kernel >> Version 2.6.17.5

Linux>>Linux_kernel >> Version 2.6.17.6

Linux>>Linux_kernel >> Version 2.6.17.7

Linux>>Linux_kernel >> Version 2.6.17.8

Linux>>Linux_kernel >> Version 2.6.17.10

Linux>>Linux_kernel >> Version 2.6.17.11

Linux>>Linux_kernel >> Version 2.6.17.12

Linux>>Linux_kernel >> Version 2.6.17.13

Linux>>Linux_kernel >> Version 2.6.17.14

Linux>>Linux_kernel >> Version 2.6.18

Linux>>Linux_kernel >> Version 2.6.18.1

Linux>>Linux_kernel >> Version 2.6.18.3

Linux>>Linux_kernel >> Version 2.6.18.4

Linux>>Linux_kernel >> Version 2.6.19

Linux>>Linux_kernel >> Version 2.6.19.1

Linux>>Linux_kernel >> Version 2.6.19.2

Linux>>Linux_kernel >> Version 2.6.20

Linux>>Linux_kernel >> Version 2.6.20.1

Linux>>Linux_kernel >> Version 2.6.20.2

Linux>>Linux_kernel >> Version 2.6.20.3

Linux>>Linux_kernel >> Version 2.6.20.4

Linux>>Linux_kernel >> Version 2.6.20.5

Linux>>Linux_kernel >> Version 2.6.20.8

Linux>>Linux_kernel >> Version 2.6.20.9

Linux>>Linux_kernel >> Version 2.6.20.11

Linux>>Linux_kernel >> Version 2.6.20.13

Linux>>Linux_kernel >> Version 2.6.20.15

Linux>>Linux_kernel >> Version 2.6.21

Linux>>Linux_kernel >> Version 2.6.21.1

Linux>>Linux_kernel >> Version 2.6.21.2

Linux>>Linux_kernel >> Version 2.6.21.6

Linux>>Linux_kernel >> Version 2.6.21.7

Linux>>Linux_kernel >> Version 2.6.22

Linux>>Linux_kernel >> Version 2.6.22.1

Linux>>Linux_kernel >> Version 2.6.22.3

Linux>>Linux_kernel >> Version 2.6.22.4

Linux>>Linux_kernel >> Version 2.6.22.5

Linux>>Linux_kernel >> Version 2.6.22.6

Linux>>Linux_kernel >> Version 2.6.22.7

Linux>>Linux_kernel >> Version 2.6.22.8

Linux>>Linux_kernel >> Version 2.6.22.11

Linux>>Linux_kernel >> Version 2.6.22.12

Linux>>Linux_kernel >> Version 2.6.22.13

Linux>>Linux_kernel >> Version 2.6.22.14

Linux>>Linux_kernel >> Version 2.6.22.15

Linux>>Linux_kernel >> Version 2.6.22.16

Linux>>Linux_kernel >> Version 2.6.22.17

Linux>>Linux_kernel >> Version 2.6.22_rc1

Linux>>Linux_kernel >> Version 2.6.22_rc7

Linux>>Linux_kernel >> Version 2.6.23

Linux>>Linux_kernel >> Version 2.6.23.1

Linux>>Linux_kernel >> Version 2.6.23.2

Linux>>Linux_kernel >> Version 2.6.23.3

Linux>>Linux_kernel >> Version 2.6.23.4

Linux>>Linux_kernel >> Version 2.6.23.5

Linux>>Linux_kernel >> Version 2.6.23.6

Linux>>Linux_kernel >> Version 2.6.23.7

Linux>>Linux_kernel >> Version 2.6.23.9

Linux>>Linux_kernel >> Version 2.6.23.10

Linux>>Linux_kernel >> Version 2.6.23.14

Linux>>Linux_kernel >> Version 2.6.24

Linux>>Linux_kernel >> Version 2.6.24.1

Linux>>Linux_kernel >> Version 2.6.24.2

Linux>>Linux_kernel >> Version 2.6.24.6

Linux>>Linux_kernel >> Version 2.6.24_rc1

Linux>>Linux_kernel >> Version 2.6.25

Linux>>Linux_kernel >> Version 2.6.25.1

Linux>>Linux_kernel >> Version 2.6.25.2

Linux>>Linux_kernel >> Version 2.6.25.3

Linux>>Linux_kernel >> Version 2.6.25.4

Linux>>Linux_kernel >> Version 2.6_test9_cvs

References

http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00000.html
Tags : vendor-advisory, x_refsource_SUSE

http://secunia.com/advisories/30000
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/30658
Tags : third-party-advisory, x_refsource_SECUNIA

http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0189
Tags : x_refsource_CONFIRM

http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00012.html
Tags : vendor-advisory, x_refsource_SUSE

http://www.securityfocus.com/bid/29589
Tags : vdb-entry, x_refsource_BID

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ddb2c43594f22843e9f3153da151deaba1a834c5
Tags : x_refsource_CONFIRM

http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00007.html
Tags : vendor-advisory, x_refsource_SUSE

http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html
Tags : vendor-advisory, x_refsource_SUSE

https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00587.html
Tags : vendor-advisory, x_refsource_FEDORA

http://secunia.com/advisories/32104
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/30982
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/30580
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.securityfocus.com/archive/1/493300/100/0/threaded
Tags : mailing-list, x_refsource_BUGTRAQ

https://exchange.xforce.ibmcloud.com/vulnerabilities/42921
Tags : vdb-entry, x_refsource_XF

http://secunia.com/advisories/30644
Tags : third-party-advisory, x_refsource_SECUNIA

http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00001.html
Tags : vendor-advisory, x_refsource_SUSE

http://secunia.com/advisories/32103
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.mandriva.com/security/advisories?name=MDVSA-2008:113
Tags : vendor-advisory, x_refsource_MANDRIVA

http://www.securitytracker.com/id?1020210
Tags : vdb-entry, x_refsource_SECTRACK

http://www.mandriva.com/security/advisories?name=MDVSA-2008:174
Tags : vendor-advisory, x_refsource_MANDRIVA

http://secunia.com/advisories/32759
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.vupen.com/english/advisories/2008/1770
Tags : vdb-entry, x_refsource_VUPEN

http://secunia.com/advisories/31107
Tags : third-party-advisory, x_refsource_SECUNIA

http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.5
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/32370
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/31836
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.ubuntu.com/usn/usn-625-1
Tags : vendor-advisory, x_refsource_UBUNTU

https://bugzilla.redhat.com/show_bug.cgi?id=443962
Tags : x_refsource_CONFIRM

http://www.debian.org/security/2008/dsa-1592
Tags : vendor-advisory, x_refsource_DEBIAN

http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00003.html
Tags : vendor-advisory, x_refsource_SUSE

http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html
Tags : vendor-advisory, x_refsource_SUSE

http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git%3Ba=commit%3Bh=33afb8403f361919aa5c8fe1d0a4f5ddbfbbea3c
Tags : x_refsource_CONFIRM

http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.6
Tags : x_refsource_CONFIRM

Date	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	8.23%	–	–
2022-03-13	–	–	8.23%	–	–
2022-04-03	–	–	8.23%	–	–
2023-02-05	–	–	2.69%	–	–
2023-02-19	–	–	8.23%	–	–
2023-03-12	–	–	–	8.93%	–
2023-06-25	–	–	–	7.42%	–
2024-02-11	–	–	–	7.42%	–
2024-06-02	–	–	–	7.42%	–
2024-06-16	–	–	–	7.64%	–
2024-11-17	–	–	–	14.26%	–
2024-12-22	–	–	–	12.56%	–
2025-01-19	–	–	–	12.56%	–
2025-02-02	–	–	–	11.19%	–
2025-02-02	–	–	–	11.19%	–
2025-03-09	–	–	–	10.46%	–
2025-03-09	–	–	–	10.46%	–
2025-03-18	–	–	–	–	13.27%
2025-03-30	–	–	–	–	18.36%

Date	Percentile
2022-02-06	82%
2022-03-13	83%
2022-04-03	93%
2023-02-05	82%
2023-02-19	93%
2023-03-12	94%
2023-06-25	93%
2024-02-11	94%
2024-06-02	94%
2024-06-16	94%
2024-11-17	96%
2024-12-22	95%
2025-01-19	95%
2025-02-02	95%
2025-02-02	95%
2025-03-09	95%
2025-03-09	95%
2025-03-18	94%
2025-03-30	95%

CVE-2008-1673 : Detail