vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2008-1673

N/A
Published: June 10, 2008 at 12:00 AM UTC
Updated: June 16, 2026 at 10:52 PM UTC
2 products affected across 2 vendorsLinux KernelDebian Linux

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 7%

Description

The asn1 implementation in (a) the Linux kernel 2.4 before 2.4.36.6 and 2.6 before 2.6.25.5, as used in the cifs and ip_nat_snmp_basic modules; and (b) the gxsnmp package; does not properly validate length values during decoding of ASN.1 BER data, which allows remote attackers to cause a denial of service (crash) or execute arbitrary code via (1) a length greater than the working buffer, which can lead to an unspecified overflow; (2) an oid length of zero, which can lead to an off-by-one error; or (3) an indefinite length for a primitive encoding.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Debian Linux· Debiandrupal
95%
4.0
Linux Kernel· Linux
95%
2.4.02.4.0 test12.4.0 test102.4.0 test112.4.0 test122.4.0 test22.4.0 test32.4.0 test42.4.0 test52.4.0 test62.4.0 test72.4.0 test82.4.0 test92.4.12.4.102.4.112.4.122.4.132.4.142.4.152.4.162.4.172.4.182.4.18 pre12.4.18 pre22.4.18 pre32.4.18 pre42.4.18 pre52.4.18 pre62.4.18 pre72.4.18 pre82.4.192.4.19 pre12.4.19 pre22.4.19 pre32.4.19 pre42.4.19 pre52.4.19 pre62.4.22.4.202.4.212.4.21 pre12.4.21 pre42.4.21 pre72.4.222.4.232.4.23 pre92.4.23_ow22.4.242.4.24_ow12.4.252.4.262.4.272.4.27 pre12.4.27 pre22.4.27 pre32.4.27 pre42.4.27 pre52.4.282.4.292.4.29 rc12.4.29 rc22.4.32.4.302.4.30 rc22.4.30 rc32.4.312.4.31 pre12.4.322.4.32 pre12.4.32 pre22.4.332.4.33 pre12.4.33.22.4.33.32.4.33.42.4.33.52.4.342.4.352.4.362.4.36.12.4.36.22.4.36.32.4.36.42.4.36.52.4.42.4.52.4.62.4.72.4.82.4.92.6.02.6.0 test12.6.0 test22.6.0 test32.6.0 test42.6.0 test52.6.0 test62.6.0 test72.6.0 test82.6.0 test92.6.12.6.1 rc12.6.1 rc22.6.102.6.10 rc22.6.112.6.11 rc22.6.11 rc32.6.11 rc42.6.11.112.6.11.122.6.11.42.6.11.52.6.11.62.6.11.72.6.11.82.6.122.6.12 rc12.6.12 rc42.6.12 rc52.6.12.12.6.12.122.6.12.22.6.12.222.6.12.32.6.12.42.6.12.52.6.12.62.6.132.6.13 rc12.6.13 rc42.6.13 rc62.6.13 rc72.6.13.12.6.13.22.6.13.32.6.13.42.6.142.6.14 rc12.6.14 rc22.6.14 rc32.6.14 rc42.6.14.12.6.14.22.6.14.32.6.14.42.6.14.52.6.152.6.15 rc12.6.15 rc22.6.15 rc32.6.15.12.6.15.112.6.15.22.6.15.32.6.15.42.6.15.52.6.162.6.16 rc12.6.16.12.6.16.112.6.16.122.6.16.132.6.16.192.6.16.232.6.16.272.6.16.72.6.16.92.6.172.6.17 rc52.6.17.12.6.17.102.6.17.112.6.17.122.6.17.132.6.17.142.6.17.22.6.17.32.6.17.52.6.17.62.6.17.72.6.17.82.6.182.6.18.12.6.18.32.6.18.42.6.192.6.19 rc12.6.19 rc22.6.19 rc32.6.19 rc42.6.19.12.6.19.22.6.22.6.202.6.20 rc22.6.20.12.6.20.112.6.20.132.6.20.152.6.20.22.6.20.32.6.20.42.6.20.52.6.20.82.6.20.92.6.212.6.21 rc32.6.21 rc42.6.21 rc52.6.21 rc62.6.21.12.6.21.22.6.21.62.6.21.72.6.222.6.22.12.6.22.112.6.22.122.6.22.132.6.22.142.6.22.152.6.22.162.6.22.172.6.22.32.6.22.42.6.22.52.6.22.62.6.22.72.6.22.82.6.22_rc12.6.22_rc72.6.232.6.23 rc12.6.23 rc22.6.23.12.6.23.102.6.23.142.6.23.22.6.23.32.6.23.42.6.23.52.6.23.62.6.23.72.6.23.92.6.24 rc22.6.24 rc32.6.24.12.6.24.22.6.24.62.6.24_rc12.6.252.6.25.12.6.25.22.6.25.32.6.25.42.6_test9_cvs

References (34)

x_refsource_CONFIRM
Source: [email protected]
http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git%3Ba=commit%3Bh=33afb8403f361919aa5c8fe1d0a4f5ddbfbbea3c
x_refsource_CONFIRM
Source: [email protected]
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ddb2c43594f22843e9f3153da151deaba1a834c5
x_refsource_CONFIRM
Source: [email protected]
http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.36.6
x_refsource_CONFIRM
Source: [email protected]
http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.5
Vendor Advisoryx_refsource_SUSE
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00007.html
Vendor Advisoryx_refsource_SUSE
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00012.html
Vendor Advisoryx_refsource_SUSE
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00000.html
Vendor Advisoryx_refsource_SUSE
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00001.html

CVSS

10HIGH[email protected]
Confidentiality
COMPLETE
Integrity
COMPLETE
Availability
COMPLETE
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-119

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card