Linux kernel multiple security vulnerabilities
Published:		09.06.2008
Source:		BUGTRAQ
SecurityVulns ID:		9065
Type:		remote
Level:		8/10
Description:		Buffer overflow in CIFS and SNMP ASN.1 parsing code. Buffer overflow in DCCP.

Affected:		LINUX : kernel 2.6
CVE:		CVE-2008-2358 (Integer overflow in the dccp_feat_change function in net/dccp/feat.c in the Datagram Congestion Control Protocol (DCCP) subsystem in the Linux kernel 2.6.18, and 2.6.17 through 2.6.20, allows local users to gain privileges via an invalid feature length, which leads to a heap-based buffer overflow.)
		CVE-2008-1673

Original document

DEBIAN, [SECURITY] [DSA 1592-1] New Linux 2.6.18 packages fix overflow conditions (09.06.2008)

Discuss:

Read or add your comments to this news (0 comments)