// For flags

CVE-2008-1367

Kernel doesn't clear DF for signal handlers

Severity Score

7.5
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

1
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

gcc 4.3.x does not generate a cld instruction while compiling functions used for string manipulation such as memcpy and memmove on x86 and i386, which can prevent the direction flag (DF) from being reset in violation of ABI conventions and cause data to be copied in the wrong direction during signal handling in the Linux kernel, which might allow context-dependent attackers to trigger memory corruption. NOTE: this issue was originally reported for CPU consumption in SBCL.

gcc 4.3.x no genera una instrucción cld mientras compila funciones usadas por cadenas manipuladas como memcpy y memmove en x86 y i386, lo que puede prevenir que el indicador de dirección (DF) sea reseteado en violación de las convenciones ABI y cause que datos sean copiados en la dirección equivocada durante el manejo de señales en el Kernel de Linux, lo que puede permitir a atacantes remotos dependiendo del contexto provocar corrupciones de memoria. NOTA: Originalmente reportada como consumo de CPU en SBCL

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2008-03-17 CVE Reserved
  • 2008-03-17 CVE Published
  • 2024-08-07 CVE Updated
  • 2024-08-07 First Exploit
  • 2024-11-04 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
  • CWE-399: Resource Management Errors
CAPEC
References (29)
URL Tag Source
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=469058 X_refsource_confirm
http://gcc.gnu.org/ml/gcc-patches/2008-03/msg00417.html Mailing List
http://gcc.gnu.org/ml/gcc-patches/2008-03/msg00428.html Mailing List
http://gcc.gnu.org/ml/gcc-patches/2008-03/msg00432.html Mailing List
http://gcc.gnu.org/ml/gcc-patches/2008-03/msg00499.html Mailing List
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e40cd10ccff3d9fbffd57b93780bee4b7b9bff51 X_refsource_confirm
http://lists.vmware.com/pipermail/security-announce/2008/000023.html Mailing List
http://lwn.net/Articles/272048/#Comments X_refsource_misc
http://marc.info/?l=git-commits-head&m=120492000901739&w=2 Mailing List
http://secunia.com/advisories/30110 Third Party Advisory
http://secunia.com/advisories/30116 Third Party Advisory
http://secunia.com/advisories/30818 Third Party Advisory
http://secunia.com/advisories/30850 Third Party Advisory
http://secunia.com/advisories/30890 Third Party Advisory
http://secunia.com/advisories/30962 Third Party Advisory
http://secunia.com/advisories/31246 Third Party Advisory
http://www.securityfocus.com/bid/29084 Vdb Entry
http://www.vupen.com/english/advisories/2008/2222/references Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/41340 Vdb Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11108 Signature
URL Date SRC
http://lkml.org/lkml/2008/3/5/207 2024-08-07
URL Date SRC
URL Date SRC
http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html 2023-11-07
http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00000.html 2023-11-07
http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00002.html 2023-11-07
http://rhn.redhat.com/errata/RHSA-2008-0508.html 2023-11-07
http://www.redhat.com/support/errata/RHSA-2008-0211.html 2023-11-07
http://www.redhat.com/support/errata/RHSA-2008-0233.html 2023-11-07
https://bugzilla.redhat.com/show_bug.cgi?id=437312 2008-06-25
https://access.redhat.com/security/cve/CVE-2008-1367 2008-06-25
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Gnu
Search vendor "Gnu"
 Gcc
Search vendor "Gnu" for product "Gcc"
 4.3
Search vendor "Gnu" for product "Gcc" and version "4.3"
-
Affected