CVE-2008-5701
Last modified
CVE-2008-5701 is a vulnerability of currently unknown severity. Array index error in arch/mips/kernel/scall64-o32.S in the Linux kernel before 2.6.28-rc8 on 64-bit MIPS platforms allows local users to cause a denial of service (system crash) via an o32 syscall with a small syscall number, which leads to an attempted read operation outside the bounds of the syscall table.. EPSS estimates a 0.40% chance of exploitation in the next 30 days.
Description
Array index error in arch/mips/kernel/scall64-o32.S in the Linux kernel before 2.6.28-rc8 on 64-bit MIPS platforms allows local users to cause a denial of service (system crash) via an o32 syscall with a small syscall number, which leads to an attempted read operation outside the bounds of the syscall table.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Linux | Linux Kernel | <= 2.6.28 | — |
| Linux | Linux Kernel | 2.6.28 | Rc1 |
| Debian | Debian Linux | 4.0 | — |
References
- http://openwall.com/lists/oss-security/2008/12/09/1Mailing List, Third Party Advisory
- http://secunia.com/advisories/33078Third Party Advisory
- http://secunia.com/advisories/34981Third Party Advisory
- http://secunia.com/advisories/35011Third Party Advisory
- http://www.debian.org/security/2009/dsa-1787Third Party Advisory
- http://www.debian.org/security/2009/dsa-1794Third Party Advisory
- http://www.securityfocus.com/bid/32716Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47190Third Party Advisory, VDB Entry
- http://openwall.com/lists/oss-security/2008/12/09/1Mailing List, Third Party Advisory
- http://secunia.com/advisories/33078Third Party Advisory
- http://secunia.com/advisories/34981Third Party Advisory
- http://secunia.com/advisories/35011Third Party Advisory
- http://www.debian.org/security/2009/dsa-1787Third Party Advisory
- http://www.debian.org/security/2009/dsa-1794Third Party Advisory
- http://www.securityfocus.com/bid/32716Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47190Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2008-5701?
How severe is CVE-2008-5701?
How do I fix CVE-2008-5701?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2008
- CVE-2008-5695wp-admin/options.php in WordPress MU before 1.3.2, and WordP…
- CVE-2008-5696Novell NetWare 6.5 before Support Pack 8, when an OES2 Linux…
- CVE-2008-5697The skype_tool.copy_num method in the Skype extension BETA 2…
- CVE-2008-5698HTMLTokenizer::scriptHandler in Konqueror in KDE 3.5.9 and 3…
- CVE-2008-5699The name service cache daemon (nscd) in Sun Solaris 10 and O…
- CVE-2008-5700libata in the Linux kernel before 2.6.27.9 does not set mini…
- CVE-2008-5702Buffer underflow in the ibwdt_ioctl function in drivers/watc…
- CVE-2008-5703gpsdrive (aka gpsdrive-scripts) 2.10~pre4 allows local users…
- CVE-2008-5704src/unit_test.c in gpsdrive (aka gpsdrive-scripts) 2.10~pre4…
- CVE-2008-5705The cTrigger::DoIt function in src/ctrigger.cpp in the trigg…
- CVE-2008-5706The cTrigger::DoIt function in src/ctrigger.cpp in the trigg…
- CVE-2008-5707SQL injection vulnerability in urunler.asp in Iltaweb Alisve…
Are you affected by CVE-2008-5701?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
