CVEvulnerability
CVE-2008-3915
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-09-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Buffer overflow in nfsd in the Linux kernel before 2.6.26.4, when NFSv4 is enabled, allows remote attackers to have an unknown impact via vectors related to decoding an NFSv4 acl.
Affected configurations
• linux linux kernel 2.6.18
• linux linux kernel 2.6.19.4
• linux linux kernel 2.6.19.5
• linux linux kernel 2.6.19.7
• linux linux kernel 2.6.20.16
• linux linux kernel 2.6.20.17
• linux linux kernel 2.6.20.18
• linux linux kernel 2.6.20.19
• linux linux kernel 2.6.20.20
• linux linux kernel 2.6.20.21
• linux linux kernel 2.6.21.5
• linux linux kernel 2.6.21.6
• linux linux kernel 2.6.21.7
• linux linux kernel 2.6.22
• linux linux kernel 2.6.22.2
• linux linux kernel 2.6.22.8
• linux linux kernel 2.6.22.9
• linux linux kernel 2.6.22.10
• linux linux kernel 2.6.22.11
• linux linux kernel 2.6.22.12
• linux linux kernel 2.6.22.13
• linux linux kernel 2.6.22.14
• linux linux kernel 2.6.22.15
• linux linux kernel 2.6.22.17
• linux linux kernel 2.6.22.18
• linux linux kernel 2.6.22.19
• linux linux kernel 2.6.22.20
• linux linux kernel 2.6.22.21
• linux linux kernel 2.6.22.22
• linux linux kernel 2.6.23
• linux linux kernel 2.6.23.8
• linux linux kernel 2.6.23.9
• linux linux kernel 2.6.23.10
• linux linux kernel 2.6.23.11
• linux linux kernel 2.6.23.12
• linux linux kernel 2.6.23.13
• linux linux kernel 2.6.23.15
• linux linux kernel 2.6.23.16
• linux linux kernel 2.6.23.17
• linux linux kernel 2.6.24
• linux linux kernel 2.6.24.1
• linux linux kernel 2.6.24.2
• linux linux kernel 2.6.24.3
• linux linux kernel 2.6.24.4
• linux linux kernel 2.6.24.5
• linux linux kernel 2.6.24.6
• linux linux kernel 2.6.24.7
• linux linux kernel 2.6.25
• linux linux kernel 2.6.25.1
• linux linux kernel 2.6.25.2
• linux linux kernel 2.6.25.3
• linux linux kernel 2.6.25.4
• linux linux kernel 2.6.25.5
• linux linux kernel 2.6.25.6
• linux linux kernel 2.6.25.7
• linux linux kernel 2.6.25.8
• linux linux kernel 2.6.25.9
• linux linux kernel 2.6.25.10
• linux linux kernel 2.6.25.11
• linux linux kernel 2.6.25.12
… and 3 more
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=91b80969ba466ba4b915a4a1d03add8c297add3f git.kernel.org
- http://lkml.org/lkml/2008/9/3/286 lkml.org
- http://secunia.com/advisories/31881 secunia.com
- http://secunia.com/advisories/32190 secunia.com
- http://secunia.com/advisories/32393 secunia.com
- http://www.debian.org/security/2008/dsa-1636 www.debian.org
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26.4 www.kernel.org
- http://www.openwall.com/lists/oss-security/2008/09/04/18 www.openwall.com
- http://www.openwall.com/lists/oss-security/2008/09/04/4 www.openwall.com
- http://www.redhat.com/support/errata/RHSA-2008-0857.html www.redhat.com
- http://www.securityfocus.com/bid/31133 www.securityfocus.com
- http://www.ubuntu.com/usn/usn-659-1 www.ubuntu.com
- https://bugzilla.redhat.com/show_bug.cgi?id=461101 bugzilla.redhat.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45055 exchange.xforce.ibmcloud.com
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=91b80969ba466ba4b915a4a1d03add8c297add3f git.kernel.org
- http://lkml.org/lkml/2008/9/3/286 lkml.org
- http://secunia.com/advisories/31881 secunia.com
- http://secunia.com/advisories/32190 secunia.com
- http://secunia.com/advisories/32393 secunia.com
- http://www.debian.org/security/2008/dsa-1636 www.debian.org
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26.4 www.kernel.org
- http://www.openwall.com/lists/oss-security/2008/09/04/18 www.openwall.com
- http://www.openwall.com/lists/oss-security/2008/09/04/4 www.openwall.com
- http://www.redhat.com/support/errata/RHSA-2008-0857.html www.redhat.com
- http://www.securityfocus.com/bid/31133 www.securityfocus.com
- http://www.ubuntu.com/usn/usn-659-1 www.ubuntu.com
- https://bugzilla.redhat.com/show_bug.cgi?id=461101 bugzilla.redhat.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45055 exchange.xforce.ibmcloud.com