The asn1 implementation in (a) the Linux kernel 2.4 before 2.4.36.6 and 2.6 before 2.6.25.5, as used in the cifs and ip_nat_snmp_basic modules; and (b) the gxsnmp package; does not properly validate length values during decoding of ASN.1 BER data, which allows remote attackers to cause a denial of service (crash) or execute arbitrary code via (1) a length greater than the working buffer, which can lead to an unspecified overflow; (2) an oid length of zero, which can lead to an off-by-one error; or (3) an indefinite length for a primitive encoding.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-xenUpgrade kernel-ppc64Upgrade kernel-default-baseUpgrade kernel-xen-baseUpgrade kernel-xen-develUpgrade kernel-paeUpgrade kernel-trace-baseUpgrade kernel-traceUpgrade kernel-trace-develUpgrade kernel-default-develUpgrade kernel-pae-develUpgrade kernel-symsUpgrade kernel-pae-baseUpgrade kernel-ppc64-develUpgrade kernel-defaultUpgrade kernel-sourceUpgrade kernel-ppc64-baseUpgrade kernel-default-manUpgrade kernel-docs | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.22-15-serverUpgrade linux-image-2.6.22-15-xenUpgrade linux-image-2.6.15-52-amd64-k8Upgrade linux-image-2.6.24-19-hppa32Upgrade linux-image-2.6.22-15-lpiacompatUpgrade linux-image-2.6.15-52-powerpc-smpUpgrade linux-image-2.6.15-52-itaniumUpgrade linux-image-2.6.22-15-sparc64-smpUpgrade linux-image-2.6.15-52-amd64-serverUpgrade linux-image-2.6.22-15-hppa32Upgrade linux-image-2.6.15-52-386Upgrade linux-image-2.6.15-52-server-bigironUpgrade linux-image-2.6.24-19-sparc64Upgrade linux-image-2.6.20-17-powerpc-smpUpgrade linux-image-2.6.15-52-itanium-smpUpgrade linux-image-2.6.22-15-rtUpgrade linux-image-2.6.22-15-umeUpgrade linux-image-2.6.24-19-sparc64-smpUpgrade linux-image-2.6.24-19-hppa64Upgrade linux-image-2.6.24-19-virtualUpgrade linux-image-2.6.24-19-serverUpgrade linux-image-2.6.15-52-hppa64-smpUpgrade linux-image-2.6.20-17-sparc64Upgrade linux-image-2.6.20-17-lowlatencyUpgrade linux-image-2.6.20-17-mckinleyUpgrade linux-image-2.6.20-17-genericUpgrade linux-image-2.6.24-19-powerpc-smpUpgrade linux-image-2.6.22-15-powerpcUpgrade linux-image-2.6.20-17-powerpc64-smpUpgrade linux-image-2.6.24-19-openvzUpgrade linux-image-2.6.22-15-hppa64Upgrade linux-image-2.6.24-19-powerpcUpgrade linux-image-2.6.22-15-powerpc64-smpUpgrade linux-image-2.6.20-17-itaniumUpgrade linux-image-2.6.22-15-mckinleyUpgrade linux-image-2.6.22-15-lpiaUpgrade linux-image-2.6.22-15-powerpc-smpUpgrade linux-image-2.6.20-17-hppa32Upgrade linux-image-2.6.15-52-mckinleyUpgrade linux-image-2.6.24-19-lpiaUpgrade linux-image-2.6.22-15-cellUpgrade linux-image-2.6.15-52-mckinley-smpUpgrade linux-image-2.6.15-52-hppa32Upgrade linux-image-2.6.15-52-amd64-xeonUpgrade linux-image-2.6.24-19-386Upgrade linux-image-2.6.22-15-genericUpgrade linux-image-2.6.22-15-sparc64Upgrade linux-image-2.6.20-17-server-bigironUpgrade linux-image-2.6.24-19-xenUpgrade linux-image-2.6.15-52-hppa64Upgrade linux-image-2.6.24-19-lpiacompatUpgrade linux-image-2.6.20-17-powerpcUpgrade linux-image-2.6.15-52-sparc64Upgrade linux-image-2.6.24-19-mckinleyUpgrade linux-image-2.6.15-52-sparc64-smpUpgrade linux-image-2.6.15-52-serverUpgrade linux-image-2.6.15-52-k7Upgrade linux-image-2.6.24-19-rtUpgrade linux-image-2.6.24-19-genericUpgrade linux-image-2.6.24-19-powerpc64-smpUpgrade linux-image-2.6.15-52-powerpcUpgrade linux-image-2.6.20-17-serverUpgrade linux-image-2.6.22-15-itaniumUpgrade linux-image-2.6.24-19-itaniumUpgrade linux-image-2.6.20-17-sparc64-smpUpgrade linux-image-2.6.15-52-hppa32-smpUpgrade linux-image-2.6.15-52-amd64-genericUpgrade linux-image-2.6.15-52-powerpc64-smpUpgrade linux-image-2.6.15-52-686Upgrade linux-image-2.6.22-15-386Upgrade linux-image-2.6.20-17-386Upgrade linux-image-2.6.20-17-hppa64Upgrade linux-image-2.6.22-15-virtual | Nov 8, 2024 | Jun 10, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub