Vulnetix
Try Vulnetix Request Demo
CVE-2008-3911 PUBLISHED CVSS 7.199999809265137 HIGH

The proc_do_xprt function in net/sunrpc/sysctl.c in the Linux kernel 2.6.26.3 does not check the length of a certain buffer obtained from userspace, which allows local users to overflow a stack-based buffer and have unspecified other impact via a crafted read system call for the /proc/sys/sunrpc/transports file.

EPSS 0.05% · 14.5th percentile

Risk Scores

CVSS v2.0
7.199999809265137
EPSS Score
0.05%
14.5th percentile

Affected Products

VendorProductVersions
linuxlinux_kernel2.6.26.3
n/an/an/a

Timeline

References

Open in Interactive Console →