CVE - CVE-2008-5025

CVE-ID
CVE-2008-5025	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Stack-based buffer overflow in the hfs_cat_find_brec function in fs/hfs/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to cause a denial of service (memory corruption or system crash) via an hfs filesystem image with an invalid catalog namelength field, a related issue to CVE-2008-4933.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:32289 URL:http://www.securityfocus.com/bid/32289 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git;a=commit;h=d38b7aa7fc3371b52d036748028db50b585ade2e CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=470769 DEBIAN:DSA-1681 URL:http://www.debian.org/security/2008/dsa-1681 DEBIAN:DSA-1687 URL:http://www.debian.org/security/2008/dsa-1687 MANDRIVA:MDVSA-2008:246 URL:~~http://www.mandriva.com/security/advisories?name=MDVSA-2008:246~~ (Obsolete source) MLIST:[oss-security] 20081110 Re: CVE requests: kernel: hfsplus-related bugs URL:http://openwall.com/lists/oss-security/2008/11/10/1 MLIST:[oss-security] 20081110 Re: CVE requests: kernel: hfsplus-related bugs URL:http://openwall.com/lists/oss-security/2008/11/10/3 MLIST:[oss-security] 20081110 Re: CVE requests: kernel: hfsplus-related bugs URL:http://openwall.com/lists/oss-security/2008/11/10/6 MLIST:[oss-security] 20081110 Re: CVE requests: kernel: hfsplus-related bugs URL:http://openwall.com/lists/oss-security/2008/11/10/7 MLIST:[oss-security] 20081111 Re: CVE requests: kernel: hfsplus-related bugs URL:http://openwall.com/lists/oss-security/2008/11/11/1 MLIST:[oss-security] 20081111 Re: CVE requests: kernel: hfsplus-related bugs URL:http://openwall.com/lists/oss-security/2008/11/11/12 OSVDB:49863 URL:~~http://osvdb.org/49863~~ (Obsolete source) OVAL:oval:org.mitre.oval:def:10470 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10470 REDHAT:RHSA-2009:0014 URL:http://www.redhat.com/support/errata/RHSA-2009-0014.html REDHAT:RHSA-2009:0264 URL:http://rhn.redhat.com/errata/RHSA-2009-0264.html SECTRACK:1021230 URL:http://www.securitytracker.com/id?1021230 SECUNIA:32719 URL:http://secunia.com/advisories/32719 SECUNIA:32918 URL:http://secunia.com/advisories/32918 SECUNIA:32998 URL:http://secunia.com/advisories/32998 SECUNIA:33180 URL:http://secunia.com/advisories/33180 SECUNIA:33556 URL:http://secunia.com/advisories/33556 SECUNIA:33641 URL:http://secunia.com/advisories/33641 SECUNIA:33704 URL:http://secunia.com/advisories/33704 SECUNIA:33858 URL:http://secunia.com/advisories/33858 SUSE:SUSE-SA:2009:004 URL:http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00006.html SUSE:SUSE-SA:2009:008 URL:http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00010.html UBUNTU:USN-679-1 URL:http://www.ubuntu.com/usn/usn-679-1 XF:linux-kernel-hfscatfindbrec-bo(46605) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/46605
Assigning CNA
MITRE Corporation
Date Record Created
20081110	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20081110)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)