CVE-2008-0122
CVE-2008-0122
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted input that triggers memory corruption.
EPSS 12.4% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://secunia.com/advisories/28579
- https://bugzilla.redhat.com/show_bug.cgi?id=429149
- http://www.redhat.com/support/errata/RHSA-2008-0300.html
- http://www.securityfocus.com/bid/27283
- http://secunia.com/advisories/30538
- http://www.securityfocus.com/archive/1/487000/100/0/threaded
- http://www.kb.cert.org/vuls/id/203611
- http://security.freebsd.org/advisories/FreeBSD-SA-08:02.libc.asc
- http://www.vupen.com/english/advisories/2008/0703
- http://support.avaya.com/elmodocs2/security/ASA-2008-244.htm
- http://www.vupen.com/english/advisories/2008/1743/references
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10190
- https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00782.html
- http://secunia.com/advisories/28429
- https://issues.rpath.com/browse/RPL-2169
- http://www.securitytracker.com/id?1019189
- http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html
- http://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=7&heading=AIX61&path=/200802/SECURITY/20080227/datafile123640&label=AIX%20libc%20inet_network%20buffer%20overflow
- http://secunia.com/advisories/28487
- http://www.isc.org/index.pl?/sw/bind/bind-security.php
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39670
- http://secunia.com/advisories/30313
- http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=4167
- https://nvd.nist.gov/vuln/detail/CVE-2008-0122