CVE-2008-1562

wireshark: crash in LDAP dissector

The LDAP dissector in Wireshark (formerly Ethereal) 0.99.2 through 0.99.8 allows remote attackers to cause a denial of service (application crash) via a malformed packet, a different vulnerability than CVE-2006-5740.

CVSS 2.0 · 5.0 Medium EPSS 50.7% KEV · Not listed

Vendors

Redhat Wireshark

Products

Enterprise Linux Wireshark

CVE-2008-1563

wireshark: crash in SCCP dissector

The "decode as" feature in packet-bssap.c in the SCCP dissector in Wireshark (formerly Ethereal) 0.99.6 through 0.99.8 allows remote attackers to cause a denial of service (application crash) via a malformed packet.

CVSS 2.0 · 4.3 Medium EPSS 3.8% KEV · Not listed

Vendors

Redhat Wireshark

Products

Enterprise Linux Wireshark

CVE-2008-1612

squid: regression in SQUID-2007:2 / CVE-2007-6239

The arrayShrink function (lib/Array.c) in Squid 2.6.STABLE17 allows attackers to cause a denial of service (process exit) via unknown vectors that cause an array to shrink to 0 entries, which triggers an assert error. NOTE: this issue is due to an incorrect fix for CVE-2007-6239.

CVSS 2.0 · 4.3 Medium EPSS 2.2% KEV · Not listed

Vendors

Redhat Squid

Products

Enterprise Linux Squid

CVE-2008-1615

kernel: ptrace: Unprivileged crash on x86_64 %cs corruption

Linux kernel 2.6.18, and possibly other versions, when running on AMD64 architectures, allows local users to cause a denial of service (crash) via certain ptrace calls.

CVSS 2.0 · 4.9 Medium EPSS < 1% KEV · Not listed

Vendors

Amd Redhat

Products

Amd64 Enterprise Linux Enterprise Linux Desktop and 1 more

CVE-2008-1619

[xen-ia64] Dom0 panic while we run ftp test tool between HVM and Dom0.

The ssm_i emulation in Xen 5.1 on IA64 architectures allows attackers to cause a denial of service (dom0 panic) via certain traffic, as demonstrated using an FTP stress test tool.

CVSS 2.0 · 4.3 Medium EPSS 1.3% KEV · Not listed

Vendors

Redhat Xensource Inc

Products

Enterprise Linux Xen

CVE-2008-1669

kernel: add rcu_read_lock() to fcheck() in both dnotify, locks.c and fix fcntl store/load race in locks.c

Linux kernel before 2.6.25.2 does not apply a certain protection mechanism for fcntl functionality, which allows local users to (1) execute code in parallel or (2) exploit a race condition to obtain "re-ordered access to the descriptor table."

CVSS 2.0 · 6.9 Medium EPSS < 1% KEV · Not listed

Vendors

Linux Redhat

Products

Linux Kernel Enterprise Linux

CVE-2008-1678

httpd: mod_ssl per-connection memory leak for connections with zlib compression

Memory leak in the zlib_stateful_init function in crypto/comp/c_zlib.c in libssl in OpenSSL 0.9.8f through 0.9.8h allows remote attackers to cause a denial of service (memory consumption) via multiple calls, as demonstrated by initial SSL client handshakes to the Apache HTTP Server mod_ssl that specify a compression algorithm.

CVSS 2.0 · 5.0 Medium EPSS 5.5% KEV · Not listed

Vendors

Openssl Redhat

Products

Openssl Enterprise Linux

CVE-2008-1679

python: imageop module integer overflows

Multiple integer overflows in imageop.c in Python before 2.5.3 allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted images that trigger heap-based buffer overflows. NOTE: this issue is due to an incomplete fix for CVE-2007-4965.

CVSS 2.0 · 6.8 Medium EPSS 4.1% KEV · Not listed

Vendors

Python Redhat

Products

Python Enterprise Linux

CVE-2008-1686

libfishsound: insufficient boundary checks

Array index vulnerability in Speex 1.1.12 and earlier, as used in libfishsound 0.9.0 and earlier, including Illiminable DirectShow Filters and Annodex Plugins for Firefox, xine-lib before 1.1.12, and many other products, allows remote attackers to execute arbitrary code via a header structure containing a negative offset, which is used to dereference a function pointer.

CVSS 2.0 · 9.3 Critical EPSS 6.5% KEV · Not listed

Vendors

Redhat Xine Xiph

Products

Enterprise Linux Xine-lib Libfishsound and 1 more

CVE-2008-1693

xpdf: embedded font vulnerability

The CairoFont::create function in CairoFontEngine.cc in Poppler, possibly before 0.8.0, as used in Xpdf, Evince, ePDFview, KWord, and other applications, does not properly handle embedded fonts in PDF files, which allows remote attackers to execute arbitrary code via a crafted font object, related to dereferencing a function pointer associated with the type of this font object.

CVSS 2.0 · 6.8 Medium EPSS 4.9% KEV · Not listed

Vendors

Poppler Redhat

Products

Poppler Enterprise Linux

CVE-2008-1721

python: integer signedness error in the zlib extension module

Integer signedness error in the zlib extension module in Python 2.5.2 and earlier allows remote attackers to execute arbitrary code via a negative signed integer, which triggers insufficient memory allocation and a buffer overflow.

CVSS 2.0 · 7.5 High EPSS 22.6% KEV · Not listed

Vendors

Canonical Debian Python and 1 more

Products

Ubuntu Linux Debian Linux Python and 1 more

CVE-2008-1722

cups: integer overflow in the image filter

Multiple integer overflows in (1) filter/image-png.c and (2) filter/image-zoom.c in CUPS 1.3 allow attackers to cause a denial of service (crash) and trigger memory corruption, as demonstrated via a crafted PNG image.

CVSS 2.0 · 4.3 Medium EPSS 2.0% KEV · Not listed

Vendors

Cups Redhat

Products

Cups Enterprise Linux

CVE-2008-1767

libxslt: fixed-sized steps array overflow via "template match" condition in XSL file

Buffer overflow in pattern.c in libxslt before 1.1.24 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XSL style sheet file with a long XSLT "transformation match" condition that triggers a large number of steps.

CVSS 2.0 · 7.5 High EPSS 12.8% KEV · Not listed

Vendors

Redhat

Products

Desktop Enterprise Linux Enterprise Linux Desktop and 2 more

CVE-2008-1801

rdesktop: iso_recv_msg() Integer Underflow Vulnerability

Integer underflow in the iso_recv_msg function (iso.c) in rdesktop 1.5.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Remote Desktop Protocol (RDP) request with a small length field.

CVSS 2.0 · 9.3 Critical EPSS 13.1% KEV · Not listed

Vendors

Rdesktop Redhat

Products

Rdesktop Enterprise Linux

CVE-2008-1803

rdesktop: channel_process() Integer Signedness Vulnerability

Integer signedness error in the xrealloc function (rdesktop.c) in RDesktop 1.5.0 allows remote attackers to execute arbitrary code via unknown parameters that trigger a heap-based overflow. NOTE: the role of the channel_process function was not specified by the original researcher.

CVSS 2.0 · 9.3 Critical EPSS 6.7% KEV · Not listed

Vendors

Rdesktop Redhat

Products

Rdesktop Enterprise Linux

CVE-2008-1806

FreeType PFB integer overflow

Integer overflow in FreeType2 before 2.3.6 allows context-dependent attackers to execute arbitrary code via a crafted set of 16-bit length values within the Private dictionary table in a Printer Font Binary (PFB) file, which triggers a heap-based buffer overflow.

CVSS 2.0 · 7.5 High EPSS 4.1% KEV · Not listed

Vendors

Freetype Redhat

Products

Freetype Enterprise Linux

CVE-2008-1807

FreeType invalid free() flaw

FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via an invalid "number of axes" field in a Printer Font Binary (PFB) file, which triggers a free of arbitrary memory locations, leading to memory corruption.

CVSS 2.0 · 7.5 High EPSS 3.6% KEV · Not listed

Vendors

Freetype Redhat

Products

Freetype Enterprise Linux

CVE-2008-1808

FreeType off-by-one flaws

Multiple off-by-one errors in FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via (1) a crafted table in a Printer Font Binary (PFB) file or (2) a crafted SHC instruction in a TrueType Font (TTF) file, which triggers a heap-based buffer overflow.

CVSS 2.0 · 7.5 High EPSS 4.2% KEV · Not listed

Vendors

Freetype Redhat

Products

Freetype Enterprise Linux

CVE-2008-1887

python: PyString_FromStringAndSize does not check for negative size values

Python 2.5.2 and earlier allows context-dependent attackers to execute arbitrary code via multiple vectors that cause a negative size value to be provided to the PyString_FromStringAndSize function, which allocates less memory than expected when assert() is disabled and triggers a buffer overflow.

CVSS 2.0 · 9.3 Critical EPSS 6.3% KEV · Not listed

Vendors

Canonical Debian Python and 1 more

Products

Ubuntu Linux Debian Linux Python and 1 more

CVE-2008-1926

util-linux: audit log injection via login

Argument injection vulnerability in login (login-utils/login.c) in util-linux-ng 2.14 and earlier makes it easier for remote attackers to hide activities by modifying portions of log events, as demonstrated by appending an "addr=" statement to the login name, aka "audit log injection."

CVSS 2.0 · 7.5 High EPSS 3.9% KEV · Not listed

Vendors

Linux Redhat

Products

Util-linux Enterprise Linux