Mô tả CVE

The asn1 implementation in (a) the Linux kernel 2.4 before 2.4.36.6 and 2.6 before 2.6.25.5, as used in the cifs and ip_nat_snmp_basic modules; and (b) the gxsnmp package; does not properly validate length values during decoding of ASN.1 BER data, which allows remote attackers to cause a denial of service (crash) or execute arbitrary code via (1) a length greater than the working buffer, which can lead to an unspecified overflow; (2) an oid length of zero, which can lead to an off-by-one error; or (3) an indefinite length for a primitive encoding.

Thông tin CVE

Điểm yếu liên quan

CWE-ID	Tên điểm yếu	Nguồn
CWE-119	Improper Restriction of Operations within the Bounds of a Memory Buffer The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.

Số liệu

Số liệu	Điểm	Mức độ nghiêm trọng	CVSS Vector	Nguồn
V2	10		AV:N/AC:L/Au:N/C:C/I:C/A:C	nvd@nist.gov

EPSS

EPSS là mô hình tính điểm dự đoán khả năng một lỗ hổng bị khai thác.

Điểm EPSS

Mô hình EPSS tạo ra điểm xác suất từ 0 đến 1 (0 đến 100%). Điểm càng cao, xác suất một lỗ hổng bị khai thác càng lớn.

Phân vị EPSS

Phân vị được dùng để xếp hạng CVE theo điểm EPSS. Ví dụ, một CVE ở phân vị thứ 95 theo điểm EPSS có nhiều khả năng bị khai thác hơn 95% CVE khác. Do đó, phân vị được dùng để so sánh điểm EPSS của một CVE với các CVE khác.

EPSS First.org

Sản phẩm được đề cập

Cấu hình 0

Debian>>Debian_linux >> Version 4.0

Linux>>Linux_kernel >> Version 2.4.0

Linux>>Linux_kernel >> Version 2.4.1

Linux>>Linux_kernel >> Version 2.4.2

Linux>>Linux_kernel >> Version 2.4.3

Linux>>Linux_kernel >> Version 2.4.4

Linux>>Linux_kernel >> Version 2.4.5

Linux>>Linux_kernel >> Version 2.4.6

Linux>>Linux_kernel >> Version 2.4.7

Linux>>Linux_kernel >> Version 2.4.8

Linux>>Linux_kernel >> Version 2.4.9

Linux>>Linux_kernel >> Version 2.4.10

Linux>>Linux_kernel >> Version 2.4.11

Linux>>Linux_kernel >> Version 2.4.12

Linux>>Linux_kernel >> Version 2.4.13

Linux>>Linux_kernel >> Version 2.4.14

Linux>>Linux_kernel >> Version 2.4.15

Linux>>Linux_kernel >> Version 2.4.16

Linux>>Linux_kernel >> Version 2.4.17

Linux>>Linux_kernel >> Version 2.4.18

Linux>>Linux_kernel >> Version 2.4.19

Linux>>Linux_kernel >> Version 2.4.20

Linux>>Linux_kernel >> Version 2.4.21

Linux>>Linux_kernel >> Version 2.4.22

Linux>>Linux_kernel >> Version 2.4.23

Linux>>Linux_kernel >> Version 2.4.23_ow2

Linux>>Linux_kernel >> Version 2.4.24

Linux>>Linux_kernel >> Version 2.4.24_ow1

Linux>>Linux_kernel >> Version 2.4.25

Linux>>Linux_kernel >> Version 2.4.26

Linux>>Linux_kernel >> Version 2.4.27

Linux>>Linux_kernel >> Version 2.4.28

Linux>>Linux_kernel >> Version 2.4.29

Linux>>Linux_kernel >> Version 2.4.30

Linux>>Linux_kernel >> Version 2.4.31

Linux>>Linux_kernel >> Version 2.4.32

Linux>>Linux_kernel >> Version 2.4.33

Linux>>Linux_kernel >> Version 2.4.33.2

Linux>>Linux_kernel >> Version 2.4.33.3

Linux>>Linux_kernel >> Version 2.4.33.4

Linux>>Linux_kernel >> Version 2.4.33.5

Linux>>Linux_kernel >> Version 2.4.34

Linux>>Linux_kernel >> Version 2.4.35

Linux>>Linux_kernel >> Version 2.4.36

Linux>>Linux_kernel >> Version 2.4.36.1

Linux>>Linux_kernel >> Version 2.4.36.2

Linux>>Linux_kernel >> Version 2.4.36.3

Linux>>Linux_kernel >> Version 2.4.36.4

Linux>>Linux_kernel >> Version 2.4.36.5

Linux>>Linux_kernel >> Version 2.6.0

Linux>>Linux_kernel >> Version 2.6.1

Linux>>Linux_kernel >> Version 2.6.2

Linux>>Linux_kernel >> Version 2.6.10

Linux>>Linux_kernel >> Version 2.6.11

Linux>>Linux_kernel >> Version 2.6.11.4

Linux>>Linux_kernel >> Version 2.6.11.5

Linux>>Linux_kernel >> Version 2.6.11.6

Linux>>Linux_kernel >> Version 2.6.11.7

Linux>>Linux_kernel >> Version 2.6.11.8

Linux>>Linux_kernel >> Version 2.6.11.11

Linux>>Linux_kernel >> Version 2.6.11.12

Linux>>Linux_kernel >> Version 2.6.12

Linux>>Linux_kernel >> Version 2.6.12.1

Linux>>Linux_kernel >> Version 2.6.12.2

Linux>>Linux_kernel >> Version 2.6.12.3

Linux>>Linux_kernel >> Version 2.6.12.4

Linux>>Linux_kernel >> Version 2.6.12.5

Linux>>Linux_kernel >> Version 2.6.12.6

Linux>>Linux_kernel >> Version 2.6.12.12

Linux>>Linux_kernel >> Version 2.6.12.22

Linux>>Linux_kernel >> Version 2.6.13

Linux>>Linux_kernel >> Version 2.6.13.1

Linux>>Linux_kernel >> Version 2.6.13.2

Linux>>Linux_kernel >> Version 2.6.13.3

Linux>>Linux_kernel >> Version 2.6.13.4

Linux>>Linux_kernel >> Version 2.6.14

Linux>>Linux_kernel >> Version 2.6.14.1

Linux>>Linux_kernel >> Version 2.6.14.2

Linux>>Linux_kernel >> Version 2.6.14.3

Linux>>Linux_kernel >> Version 2.6.14.4

Linux>>Linux_kernel >> Version 2.6.14.5

Linux>>Linux_kernel >> Version 2.6.15

Linux>>Linux_kernel >> Version 2.6.15.1

Linux>>Linux_kernel >> Version 2.6.15.2

Linux>>Linux_kernel >> Version 2.6.15.3

Linux>>Linux_kernel >> Version 2.6.15.4

Linux>>Linux_kernel >> Version 2.6.15.5

Linux>>Linux_kernel >> Version 2.6.15.11

Linux>>Linux_kernel >> Version 2.6.16

Linux>>Linux_kernel >> Version 2.6.16.1

Linux>>Linux_kernel >> Version 2.6.16.7

Linux>>Linux_kernel >> Version 2.6.16.9

Linux>>Linux_kernel >> Version 2.6.16.11

Linux>>Linux_kernel >> Version 2.6.16.12

Linux>>Linux_kernel >> Version 2.6.16.13

Linux>>Linux_kernel >> Version 2.6.16.19

Linux>>Linux_kernel >> Version 2.6.16.23

Linux>>Linux_kernel >> Version 2.6.16.27

Linux>>Linux_kernel >> Version 2.6.17

Linux>>Linux_kernel >> Version 2.6.17.1

Linux>>Linux_kernel >> Version 2.6.17.2

Linux>>Linux_kernel >> Version 2.6.17.3

Linux>>Linux_kernel >> Version 2.6.17.5

Linux>>Linux_kernel >> Version 2.6.17.6

Linux>>Linux_kernel >> Version 2.6.17.7

Linux>>Linux_kernel >> Version 2.6.17.8

Linux>>Linux_kernel >> Version 2.6.17.10

Linux>>Linux_kernel >> Version 2.6.17.11

Linux>>Linux_kernel >> Version 2.6.17.12

Linux>>Linux_kernel >> Version 2.6.17.13

Linux>>Linux_kernel >> Version 2.6.17.14

Linux>>Linux_kernel >> Version 2.6.18

Linux>>Linux_kernel >> Version 2.6.18.1

Linux>>Linux_kernel >> Version 2.6.18.3

Linux>>Linux_kernel >> Version 2.6.18.4

Linux>>Linux_kernel >> Version 2.6.19

Linux>>Linux_kernel >> Version 2.6.19.1

Linux>>Linux_kernel >> Version 2.6.19.2

Linux>>Linux_kernel >> Version 2.6.20

Linux>>Linux_kernel >> Version 2.6.20.1

Linux>>Linux_kernel >> Version 2.6.20.2

Linux>>Linux_kernel >> Version 2.6.20.3

Linux>>Linux_kernel >> Version 2.6.20.4

Linux>>Linux_kernel >> Version 2.6.20.5

Linux>>Linux_kernel >> Version 2.6.20.8

Linux>>Linux_kernel >> Version 2.6.20.9

Linux>>Linux_kernel >> Version 2.6.20.11

Linux>>Linux_kernel >> Version 2.6.20.13

Linux>>Linux_kernel >> Version 2.6.20.15

Linux>>Linux_kernel >> Version 2.6.21

Linux>>Linux_kernel >> Version 2.6.21.1

Linux>>Linux_kernel >> Version 2.6.21.2

Linux>>Linux_kernel >> Version 2.6.21.6

Linux>>Linux_kernel >> Version 2.6.21.7

Linux>>Linux_kernel >> Version 2.6.22

Linux>>Linux_kernel >> Version 2.6.22.1

Linux>>Linux_kernel >> Version 2.6.22.3

Linux>>Linux_kernel >> Version 2.6.22.4

Linux>>Linux_kernel >> Version 2.6.22.5

Linux>>Linux_kernel >> Version 2.6.22.6

Linux>>Linux_kernel >> Version 2.6.22.7

Linux>>Linux_kernel >> Version 2.6.22.8

Linux>>Linux_kernel >> Version 2.6.22.11

Linux>>Linux_kernel >> Version 2.6.22.12

Linux>>Linux_kernel >> Version 2.6.22.13

Linux>>Linux_kernel >> Version 2.6.22.14

Linux>>Linux_kernel >> Version 2.6.22.15

Linux>>Linux_kernel >> Version 2.6.22.16

Linux>>Linux_kernel >> Version 2.6.22.17

Linux>>Linux_kernel >> Version 2.6.22_rc1

Linux>>Linux_kernel >> Version 2.6.22_rc7

Linux>>Linux_kernel >> Version 2.6.23

Linux>>Linux_kernel >> Version 2.6.23.1

Linux>>Linux_kernel >> Version 2.6.23.2

Linux>>Linux_kernel >> Version 2.6.23.3

Linux>>Linux_kernel >> Version 2.6.23.4

Linux>>Linux_kernel >> Version 2.6.23.5

Linux>>Linux_kernel >> Version 2.6.23.6

Linux>>Linux_kernel >> Version 2.6.23.7

Linux>>Linux_kernel >> Version 2.6.23.9

Linux>>Linux_kernel >> Version 2.6.23.10

Linux>>Linux_kernel >> Version 2.6.23.14

Linux>>Linux_kernel >> Version 2.6.24

Linux>>Linux_kernel >> Version 2.6.24.1

Linux>>Linux_kernel >> Version 2.6.24.2

Linux>>Linux_kernel >> Version 2.6.24.6

Linux>>Linux_kernel >> Version 2.6.24_rc1

Linux>>Linux_kernel >> Version 2.6.25

Linux>>Linux_kernel >> Version 2.6.25.1

Linux>>Linux_kernel >> Version 2.6.25.2

Linux>>Linux_kernel >> Version 2.6.25.3

Linux>>Linux_kernel >> Version 2.6.25.4

Linux>>Linux_kernel >> Version 2.6_test9_cvs

Tài liệu tham khảo

http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00000.html
Tags : vendor-advisory, x_refsource_SUSE

http://secunia.com/advisories/30000
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/30658
Tags : third-party-advisory, x_refsource_SECUNIA

http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0189
Tags : x_refsource_CONFIRM

http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00012.html
Tags : vendor-advisory, x_refsource_SUSE

http://www.securityfocus.com/bid/29589
Tags : vdb-entry, x_refsource_BID

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ddb2c43594f22843e9f3153da151deaba1a834c5
Tags : x_refsource_CONFIRM

http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00007.html
Tags : vendor-advisory, x_refsource_SUSE

http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html
Tags : vendor-advisory, x_refsource_SUSE

https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00587.html
Tags : vendor-advisory, x_refsource_FEDORA

http://secunia.com/advisories/32104
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/30982
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/30580
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.securityfocus.com/archive/1/493300/100/0/threaded
Tags : mailing-list, x_refsource_BUGTRAQ

https://exchange.xforce.ibmcloud.com/vulnerabilities/42921
Tags : vdb-entry, x_refsource_XF

http://secunia.com/advisories/30644
Tags : third-party-advisory, x_refsource_SECUNIA

http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00001.html
Tags : vendor-advisory, x_refsource_SUSE

http://secunia.com/advisories/32103
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.mandriva.com/security/advisories?name=MDVSA-2008:113
Tags : vendor-advisory, x_refsource_MANDRIVA

http://www.securitytracker.com/id?1020210
Tags : vdb-entry, x_refsource_SECTRACK

http://www.mandriva.com/security/advisories?name=MDVSA-2008:174
Tags : vendor-advisory, x_refsource_MANDRIVA

http://secunia.com/advisories/32759
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.vupen.com/english/advisories/2008/1770
Tags : vdb-entry, x_refsource_VUPEN

http://secunia.com/advisories/31107
Tags : third-party-advisory, x_refsource_SECUNIA

http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.5
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/32370
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/31836
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.ubuntu.com/usn/usn-625-1
Tags : vendor-advisory, x_refsource_UBUNTU

https://bugzilla.redhat.com/show_bug.cgi?id=443962
Tags : x_refsource_CONFIRM

http://www.debian.org/security/2008/dsa-1592
Tags : vendor-advisory, x_refsource_DEBIAN

http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00003.html
Tags : vendor-advisory, x_refsource_SUSE

http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html
Tags : vendor-advisory, x_refsource_SUSE

http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git%3Ba=commit%3Bh=33afb8403f361919aa5c8fe1d0a4f5ddbfbbea3c
Tags : x_refsource_CONFIRM

http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.6
Tags : x_refsource_CONFIRM

Ngày	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	8.23%	–	–
2022-03-13	–	–	8.23%	–	–
2022-04-03	–	–	8.23%	–	–
2023-02-05	–	–	2.69%	–	–
2023-02-19	–	–	8.23%	–	–
2023-03-12	–	–	–	8.93%	–
2023-06-25	–	–	–	7.42%	–
2024-02-11	–	–	–	7.42%	–
2024-06-02	–	–	–	7.42%	–
2024-06-16	–	–	–	7.64%	–
2024-11-17	–	–	–	14.26%	–
2024-12-22	–	–	–	12.56%	–
2025-01-19	–	–	–	12.56%	–
2025-02-02	–	–	–	11.19%	–
2025-02-02	–	–	–	11.19%	–
2025-03-09	–	–	–	10.46%	–
2025-03-09	–	–	–	10.46%	–
2025-03-18	–	–	–	–	13.27%
2025-03-30	–	–	–	–	18.36%

Ngày	Phân vị
2022-02-06	82%
2022-03-13	83%
2022-04-03	93%
2023-02-05	82%
2023-02-19	93%
2023-03-12	94%
2023-06-25	93%
2024-02-11	94%
2024-06-02	94%
2024-06-16	94%
2024-11-17	96%
2024-12-22	95%
2025-01-19	95%
2025-02-02	95%
2025-02-02	95%
2025-03-09	95%
2025-03-09	95%
2025-03-18	94%
2025-03-30	95%

CVE-2008-1673 : Chi tiết

CVE-2008-1673