CVE-2008-3272 — Vulnetix

Try Vulnetix Request Demo

CVE-2008-3272 PUBLISHED

Reported by redhat · Published August 8, 2008

The snd_seq_oss_synth_make_info function in sound/core/seq/oss/seq_oss_synth.c in the sound subsystem in the Linux kernel before 2.6.27-rc2 does not verify that the device number is within the range defined by max_synthdev before returning certain data to the caller, which allows local users to obtain sensitive information.

Affected Products

Vendor	Product	Versions
n/a	n/a	n/a
n/a	n/a	n/a, n/a

Timeline

Aug 8, 2008 CVE Published
Feb 4, 2022 EPSS Score
Mar 28, 2022 EPSS Score
May 19, 2022 EPSS Score
Jul 10, 2022 EPSS Score
Sep 1, 2022 EPSS Score
Oct 23, 2022 EPSS Score
Dec 14, 2022 EPSS Score
Feb 4, 2023 EPSS Score
Mar 7, 2023 EPSS Score
Mar 28, 2023 EPSS Score
May 19, 2023 EPSS Score

References

SUSE-SA:2008:047 vendor-advisoryx_refsource_SUSE
DSA-1630 vendor-advisoryx_refsource_DEBIAN
RHSA-2008:0885 vendor-advisoryx_refsource_REDHAT
USN-637-1 vendor-advisoryx_refsource_UBUNTU
32190 third-party-advisoryx_refsource_SECUNIA
DSA-1636 vendor-advisoryx_refsource_DEBIAN
oval:org.mitre.oval:def:11182 vdb-entrysignaturex_refsource_OVAL
RHSA-2008:0972 vendor-advisoryx_refsource_REDHAT
ADV-2008-2307 vdb-entryx_refsource_VUPEN
31614 third-party-advisoryx_refsource_SECUNIA
1020636 vdb-entryx_refsource_SECTRACK
31881 third-party-advisoryx_refsource_SECUNIA
SUSE-SA:2008:052 vendor-advisoryx_refsource_SUSE
32104 third-party-advisoryx_refsource_SECUNIA
31551 third-party-advisoryx_refsource_SECUNIA
30559 vdb-entryx_refsource_BID
RHSA-2008:0857 vendor-advisoryx_refsource_REDHAT
SUSE-SA:2008:048 vendor-advisoryx_refsource_SUSE
linux-kernel-seqosssynth-info-disclosure(44225) vdb-entryx_refsource_XF
32103 third-party-advisoryx_refsource_SECUNIA

…and 11 more

Open in Interactive Console →