CVEvulnerability

CVE-2008-6560

7.8 HIGH Published 2009-03-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-03-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
Weaknesses
CWE-119

Description

Buffer overflow in CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9 and Red Hat Enterprise Linux (RHEL) 5 allows attackers to cause a denial of service (CPU consumption and memory corruption) via a cluster.conf file with many lines. NOTE: it is not clear whether this issue crosses privilege boundaries in realistic uses of the product.

Affected configurations

• redhat cman (<= 2.03.08-1) • redhat cman 2.03.03-1 • redhat cman 2.03.04-1 • redhat cman 2.03.05-1 • redhat cman 2.03.07-1

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References