CVE catalog

CVE-2008-1673

linux-2.6 - overflow conditions

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
7.09% · Oct 25, 2026

This issue did not have a security consequence for the versions of the Linux kernel as shipped with Red Hat Enterprise Linux 3, 4, and 5, and as such, was treated as a bug fix. This issue could result in arbitrary code execution if the SLOB or SLUB memory allocators were used (introduced in Linux kernel versions 2.6.16 and 2.6.22 respectively). Red Hat Enterprise Linux and Red Hat Enterprise MRG use the SLAB memory allocator, which, in this case, cannot be exploited to allow arbitrary code execution. Red Hat Enterprise Linux 2 and Red Hat Enterprise MRG were not affected. Not vulnerable. This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2, 3, 4, 5 or Red Hat Enterprise MRG. The but existed on Red Hat Enterprise Linux 3, 4, and 5. However, this is only a security issue if the SLOB or SLUB memory allocators were used (introduced in Linux kernel versions 2.6.16 and 2.6.22, respectively). All Red Hat Enterprise Linux and Red Hat Enterprise MRG kernels use the SLAB memory allocator, which in this case, cannot be exploited to allow arbitrary code execution. As a preventive measure, the underlying bug was addressed in Red Hat Enterprise Linux 3, 4, and 5, via the advisories RHSA-2008:0973, RHSA-2008:0508, and RHSA-2008:0519, respectively.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianlinux-2.64.02.6.18.dfsg.1-12vulnerable
Debianlinux-2.64.02.6.18.dfsg.1-12etch1vulnerable
Debianlinux-2.64.02.6.18.dfsg.1-12etch2vulnerable
Debianlinux-2.64.02.6.18.dfsg.1-13vulnerable
Debianlinux-2.64.02.6.18.dfsg.1-13etch1vulnerable
Debianlinux-2.64.02.6.18.dfsg.1-13etch2vulnerable
Debianlinux-2.64.02.6.18.dfsg.1-13etch3vulnerable
Debianlinux-2.64.02.6.18.dfsg.1-13etch4vulnerable
Debianlinux-2.64.02.6.18.dfsg.1-13etch5vulnerable
Debianlinux-2.64.02.6.18.dfsg.1-13etch6vulnerable
Debianlinux-2.64.02.6.18.dfsg.1-13lenny1vulnerable
Debianlinux-2.64.02.6.18.dfsg.1-14vulnerable
Debianlinux-2.64.02.6.18.dfsg.1-15vulnerable
Debianlinux-2.64.02.6.18.dfsg.1-16vulnerable
Debianlinux-2.64.02.6.18.dfsg.1-17vulnerable
Debianlinux-2.64.02.6.18.dfsg.1-17etch1vulnerable
Debianlinux-2.64.02.6.18.dfsg.1-18vulnerable
Debianlinux-2.64.02.6.18.dfsg.1-18etch1vulnerable
Debianlinux-2.64.02.6.18.dfsg.1-18etch3vulnerable
Debianlinux-2.64.02.6.18.dfsg.1-18etch4vulnerable
Debianlinux-2.64.02.6.18.dfsg.1-18etch5vulnerable
Debianlinux-2.64.02.6.18.dfsg.1-18etch6fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianlinux-2.6deb4.02.6.18.dfsg.1-18etch6Not reportedDSA-1592-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References