← back
CVE-2008-5079

CVE-2008-5079

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 1.1%
from disclosure to weapon1 days
Published on NVDDec 9
1st PoC+1d
exploitation probability
1.1%top 38% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
net/atm/svc.c in the ATM subsystem in the Linux kernel 2.6.27.8 and earlier allows local users to cause a denial of service (kernel infinite loop) by making two calls to svc_listen for the same socket, and then reading a /proc/net/atm/*vc file, related to corruption of the vcc table.
Affected products
n/a · n/a
public PoCs found — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/7405
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00006.htmlhttp://lists.opensuse.org/opensuse-security-announce/2009-01/msg00010.htmlhttp://lists.opensuse.org/opensuse-security-announce/2009-02/msg00003.htmlhttp://marc.info/?l=linux-netdev&m=122841256115780&w=2http://secunia.com/advisories/32913http://secunia.com/advisories/33083http://secunia.com/advisories/33348http://secunia.com/advisories/33623http://secunia.com/advisories/33641http://secunia.com/advisories/33704http://secunia.com/advisories/33706http://secunia.com/advisories/33756