Vulnetix
Try Vulnetix Request Demo
CVE-2008-2358 PUBLISHED CVSS 7.199999809265137 HIGH

Integer overflow in the dccp_feat_change function in net/dccp/feat.c in the Datagram Congestion Control Protocol (DCCP) subsystem in the Linux kernel 2.6.18, and 2.6.17 through 2.6.20, allows local users to gain privileges via an invalid feature length, which leads to a heap-based buffer overflow.

EPSS 0.07% · 20.2th percentile

Risk Scores

CVSS v2.0
7.199999809265137
EPSS Score
0.07%
20.2th percentile

Affected Products

VendorProductVersions
linuxlinux_kernel2.6.17, 2.6.18, 2.6.19
n/an/an/a

Timeline

References

Open in Interactive Console →