National Cyber-Alert System

Vulnerability Summary for CVE-2008-3276

Overview

Integer overflow in the dccp_setsockopt_change function in net/dccp/proto.c in the Datagram Congestion Control Protocol (DCCP) subsystem in the Linux kernel 2.6.17-rc1 through 2.6.26.2 allows remote attackers to cause a denial of service (panic) via a crafted integer value, related to Change L and Change R options without at least one byte in the dccpsf_val field.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: CONFIRM

Name: https://bugzilla.redhat.com/show_bug.cgi?id=459226

Hyperlink:https://bugzilla.redhat.com/show_bug.cgi?id=459226

External Source: UBUNTU

Name: USN-659-1

Hyperlink:http://www.ubuntu.com/usn/usn-659-1

External Source: SECTRACK

Name: 1020705

Hyperlink:http://www.securitytracker.com/id?1020705

External Source: BID

Name: 30704

Hyperlink:http://www.securityfocus.com/bid/30704

External Source: REDHAT

Name: RHSA-2008:0957

Hyperlink:http://www.redhat.com/support/errata/RHSA-2008-0957.html

External Source: REDHAT

Name: RHSA-2008:0857

Hyperlink:http://www.redhat.com/support/errata/RHSA-2008-0857.html

External Source: MLIST

Name: [oss-security] 20080815 CVE-2008-3276 Linux kernel dccp_setsockopt_change() integer overflow

Hyperlink:http://www.openwall.com/lists/oss-security/2008/08/15/3

External Source: VUPEN

Name: ADV-2008-2406

Hyperlink:http://www.frsirt.com/english/advisories/2008/2406

External Source: DEBIAN

Name: DSA-1653

Hyperlink:http://www.debian.org/security/2008/dsa-1653

External Source: DEBIAN

Name: DSA-1636

Hyperlink:http://www.debian.org/security/2008/dsa-1636

External Source: SECUNIA

Name: 32485

Hyperlink:http://secunia.com/advisories/32485

External Source: SECUNIA

Name: 32393

Hyperlink:http://secunia.com/advisories/32393

External Source: SECUNIA

Name: 32237

Hyperlink:http://secunia.com/advisories/32237

External Source: SECUNIA

Name: 32190

Hyperlink:http://secunia.com/advisories/32190

External Source: SECUNIA

Name: 31881

Hyperlink:http://secunia.com/advisories/31881

External Source: SECUNIA

Name: 31836

Hyperlink:http://secunia.com/advisories/31836

External Source: SECUNIA

Name: 31509

Hyperlink:http://secunia.com/advisories/31509

External Source: CONFIRM

Name: http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.26.y.git;a=commit;h=3e8a0a559c66ee9e7468195691a56fefc3589740

Hyperlink:http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.26.y.git;a=commit;h=3e8a0a559c66ee9e7468195691a56fefc3589740