Resource management errors in Linux kernel - CVE-2008-1675

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU95206

Resource management errors in Linux kernel - CVE-2008-1675

Published: May 2, 2008 / Updated: October 11, 2018


Vulnerability identifier: #VU95206
CSH Severity: Low
CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2008-1675
CWE-ID: CWE-399
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to execute arbitrary code.

The bdx_ioctl_priv function in the tehuti driver (tehuti.c) in Linux kernel 2.6.x before 2.6.25.1 does not properly check certain information related to register size, which has unspecified impact and local attack vectors, probably related to reading or writing kernel memory.


Affected software

Linux kernel
Ubuntu
linux (Ubuntu package)

How to mitigate CVE-2008-1675

Install update from vendor's repository.

linux (Ubuntu package) - update to 2.6.24-18.32

External References

Related Security Bulletins