kernel: possible buffer overflow in ASN.1 parsing routines
Published Jun 10, 2008
10.0
HIGHCVSS 2.0
EPSS 7.09%
Description
The asn1 implementation in (a) the Linux kernel 2.4 before 2.4.36.6 and 2.6 before 2.6.25.5, as used in the cifs and ip_nat_snmp_basic modules; and (b) the gxsnmp package; does not properly validate length values during decoding of ASN.1 BER data, which allows remote attackers to cause a denial of service (crash) or execute arbitrary code via (1) a length greater than the working buffer, which can lead to an unspecified overflow; (2) an oid length of zero, which can lead to an off-by-one error; or (3) an indefinite length for a primitive encoding.
Affected products
No data.
- 4.0
- 4.0
- 4.0
- 4.0
- 4.0
- 4.0
- 4.0
- 4.0
- 4.0
- 4.0
- 4.0
- 4.0
- 4.0
- 2.4.0
- 2.4.0
- 2.4.0
- 2.4.0
- 2.4.0
- 2.4.0
- 2.4.0
- 2.4.0
- 2.4.0
- 2.4.0
- 2.4.0
- 2.4.0
- 2.4.0
- 2.4.1
- 2.4.2
- 2.4.3
- 2.4.4
- 2.4.5
- 2.4.6
- 2.4.7
- 2.4.8
- 2.4.9
- 2.4.10
- 2.4.11
- 2.4.12
- 2.4.13
- 2.4.14
- 2.4.15
- 2.4.16
- 2.4.17
- 2.4.18
- 2.4.18
- 2.4.18
- 2.4.18
- 2.4.18
- 2.4.18
- 2.4.18
- 2.4.18
- 2.4.18
- 2.4.19
- 2.4.19
- 2.4.19
- 2.4.19
- 2.4.19
- 2.4.19
- 2.4.19
- 2.4.20
- 2.4.21
- 2.4.21
- 2.4.21
- 2.4.21
- 2.4.22
- 2.4.23
- 2.4.23
- 2.4.23_ow2
- 2.4.24
- 2.4.24_ow1
- 2.4.25
- 2.4.26
- 2.4.27
- 2.4.27
- 2.4.27
- 2.4.27
- 2.4.27
- 2.4.27
- 2.4.28
- 2.4.29
- 2.4.29
- 2.4.29
- 2.4.30
- 2.4.30
- 2.4.30
- 2.4.31
- 2.4.31
- 2.4.32
- 2.4.32
- 2.4.32
- 2.4.33
- 2.4.33
- 2.4.33.2
- 2.4.33.3
- 2.4.33.4
- 2.4.33.5
- 2.4.34
- 2.4.35
- 2.4.36
- 2.4.36.1
- 2.4.36.2
- 2.4.36.3
- 2.4.36.4
- 2.4.36.5
- 2.6.0
- 2.6.0
- 2.6.0
- 2.6.0
- 2.6.0
- 2.6.0
- 2.6.0
- 2.6.0
- 2.6.0
- 2.6.0
- 2.6.1
- 2.6.1
- 2.6.1
- 2.6.2
- 2.6.10
- 2.6.10
- 2.6.11
- 2.6.11
- 2.6.11
- 2.6.11
- 2.6.11.4
- 2.6.11.5
- 2.6.11.6
- 2.6.11.7
- 2.6.11.8
- 2.6.11.11
- 2.6.11.12
- 2.6.12
- 2.6.12
- 2.6.12
- 2.6.12
- 2.6.12.1
- 2.6.12.2
- 2.6.12.3
- 2.6.12.4
- 2.6.12.5
- 2.6.12.6
- 2.6.12.12
- 2.6.12.22
- 2.6.13
- 2.6.13
- 2.6.13
- 2.6.13
- 2.6.13
- 2.6.13.1
- 2.6.13.2
- 2.6.13.3
- 2.6.13.4
- 2.6.14
- 2.6.14
- 2.6.14
- 2.6.14
- 2.6.14
- 2.6.14.1
- 2.6.14.2
- 2.6.14.3
- 2.6.14.4
- 2.6.14.5
- 2.6.15
- 2.6.15
- 2.6.15
- 2.6.15
- 2.6.15.1
- 2.6.15.2
- 2.6.15.3
- 2.6.15.4
- 2.6.15.5
- 2.6.15.11
- 2.6.16
- 2.6.16
- 2.6.16.1
- 2.6.16.7
- 2.6.16.9
- 2.6.16.11
- 2.6.16.12
- 2.6.16.13
- 2.6.16.19
- 2.6.16.23
- 2.6.16.27
- 2.6.17
- 2.6.17
- 2.6.17.1
- 2.6.17.2
- 2.6.17.3
- 2.6.17.5
- 2.6.17.6
- 2.6.17.7
- 2.6.17.8
- 2.6.17.10
- 2.6.17.11
- 2.6.17.12
- 2.6.17.13
- 2.6.17.14
- 2.6.18
- 2.6.18.1
- 2.6.18.3
- 2.6.18.4
- 2.6.19
- 2.6.19
- 2.6.19
- 2.6.19
- 2.6.19
- 2.6.19.1
- 2.6.19.2
- 2.6.20
- 2.6.20
- 2.6.20.1
- 2.6.20.2
- 2.6.20.3
- 2.6.20.4
- 2.6.20.5
- 2.6.20.8
- 2.6.20.9
- 2.6.20.11
- 2.6.20.13
- 2.6.20.15
- 2.6.21
- 2.6.21
- 2.6.21
- 2.6.21
- 2.6.21
- 2.6.21.1
- 2.6.21.2
- 2.6.21.6
- 2.6.21.7
- 2.6.22
- 2.6.22.1
- 2.6.22.3
- 2.6.22.4
- 2.6.22.5
- 2.6.22.6
- 2.6.22.7
- 2.6.22.8
- 2.6.22.11
- 2.6.22.12
- 2.6.22.13
- 2.6.22.14
- 2.6.22.15
- 2.6.22.16
- 2.6.22.17
- 2.6.22_rc1
- 2.6.22_rc7
- 2.6.23
- 2.6.23
- 2.6.23
- 2.6.23.1
- 2.6.23.2
- 2.6.23.3
- 2.6.23.4
- 2.6.23.5
- 2.6.23.6
- 2.6.23.7
- 2.6.23.9
- 2.6.23.10
- 2.6.23.14
- 2.6.24
- 2.6.24
- 2.6.24.1
- 2.6.24.2
- 2.6.24.6
- 2.6.24_rc1
- 2.6.25
- 2.6.25.1
- 2.6.25.2
- 2.6.25.3
- 2.6.25.4
- 2.6_test9_cvs
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
Red Hat statement
Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2, 3, 4, 5 or Red Hat Enterprise MRG. The but existed on Red Hat Enterprise Linux 3, 4, and 5. However, this is only a security issue if the SLOB or SLUB memory allocators were used (introduced in Linux kernel versions 2.6.16 and 2.6.22, respectively). All Red Hat Enterprise Linux and Red Hat Enterprise MRG kernels use the SLAB memory allocator, which in this case, cannot be exploited to allow arbitrary code execution. As a preventive measure, the underlying bug was addressed in Red Hat Enterprise Linux 3, 4, and 5, via the advisories RHSA-2008:0973, RHSA-2008:0508, and RHSA-2008:0519, respectively.
Metrics
No CVSS v4.0 score for this CVE.
No CVSS v3.1 score for this CVE.
No CVSS v3.0 score for this CVE.
AV:N/AC:L/Au:N/C:C/I:C/A:C
This CVE is not in the KEV list.
No CISA SSVC assessment for this CVE yet.
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.
Score over time
2022–2026- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Percentile over time
- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Table of values (17 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 1, 2026 | 7.09% (0.07091) | 94.04th | v5 (v2026.06.15) |
| Jun 15, 2026 | 7.09% (0.07091) | 93.39th | v5 (v2026.06.15) |
| Mar 30, 2025 | 18.36% (0.18359) | 94.70th | v4 (v2025.03.14) |
| Mar 29, 2025 | 15.49% (0.15492) | 91.14th | v4 (v2025.03.14) |
| Mar 19, 2025 | 18.36% (0.18359) | 94.48th | v4 (v2025.03.14) |
| Mar 17, 2025 | 13.27% (0.13272) | 93.61th | v4 (v2025.03.14) |
| Jan 28, 2025 | 11.19% (0.11189) | 95.19th | v3 (v2023.03.01) |
| Dec 17, 2024 | 12.56% (0.12559) | 95.43th | v3 (v2023.03.01) |
| Nov 12, 2024 | 14.26% (0.14256) | 95.85th | v3 (v2023.03.01) |
| Jun 16, 2024 | 7.64% (0.07637) | 94.18th | v3 (v2023.03.01) |
| Jun 23, 2023 | 7.42% (0.07416) | 93.14th | v3 (v2023.03.01) |
| Mar 7, 2023 | 8.93% (0.08927) | 93.56th | v3 (v2023.03.01) |
| Mar 6, 2023 | 8.23% (0.08228) | 93.49th | v2 (v2022.01.01) |
| Feb 13, 2023 | 8.23% (0.08228) | 93.20th | v2 (v2022.01.01) |
| Feb 3, 2023 | 2.69% (0.02686) | 82.44th | v2 (v2022.01.01) |
| Apr 1, 2022 | 8.23% (0.08228) | 92.89th | v2 (v2022.01.01) |
| Feb 4, 2022 | 8.23% (0.08228) | 82.23th | v2 (v2022.01.01) |
References (37)
- http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git%3Ba=commit%3Bh=33afb8403f361919aa5c8fe1d0a4f5ddbfbbea3c x_refsource_CONFIRM
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ddb2c43594f22843e9f3153da151deaba1a834c5 x_refsource_CONFIRM
- http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.6 x_refsource_CONFIRM
- http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.5 x_refsource_CONFIRM
- http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00007.html vendor-advisoryx_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00012.html vendor-advisoryx_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00000.html vendor-advisoryx_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00001.html vendor-advisoryx_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00003.html vendor-advisoryx_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html vendor-advisoryx_refsource_SUSE
- http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html vendor-advisoryx_refsource_SUSE
- http://secunia.com/advisories/30000 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/30580 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/30644 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/30658 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/30982 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/31107 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/31836 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/32103 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/32104 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/32370 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/32759 third-party-advisoryx_refsource_SECUNIA
- http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0189 x_refsource_CONFIRM
- http://www.debian.org/security/2008/dsa-1592 vendor-advisoryx_refsource_DEBIAN
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:113 vendor-advisoryx_refsource_MANDRIVA
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:174 vendor-advisoryx_refsource_MANDRIVA
- http://www.securityfocus.com/archive/1/493300/100/0/threaded mailing-listx_refsource_BUGTRAQ
- http://www.securityfocus.com/bid/29589 vdb-entryx_refsource_BIDPatch
- http://www.securitytracker.com/id?1020210 vdb-entryx_refsource_SECTRACK
- http://www.ubuntu.com/usn/usn-625-1 vendor-advisoryx_refsource_UBUNTU
- http://www.vupen.com/english/advisories/2008/1770 vdb-entryx_refsource_VUPEN
- https://access.redhat.com/security/cve/CVE-2008-1673 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=443962 x_refsource_CONFIRMIssue Tracking
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42921 vdb-entryx_refsource_XF
- https://nvd.nist.gov/vuln/detail/CVE-2008-1673
- https://www.cve.org/CVERecord?id=CVE-2008-1673
- https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00587.html vendor-advisoryx_refsource_FEDORA
Change history (0)
No recorded changes yet.