CVE-2008-2812

Published: Jul 9, 2008Modified: Apr 23, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

The Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving NULL pointer dereference of function pointers in (1) hamradio/6pack.c, (2) hamradio/mkiss.c, (3) irda/irtty-sir.c, (4) ppp_async.c, (5) ppp_synctty.c, (6) slip.c, (7) wan/x25_asy.c, and (8) wireless/strip.c in drivers/net/.

Affected (22)

Products: Linux: Linux Kernel · Canonical: Ubuntu Linux · Novell: Linux Desktop · +4 more

Show all products

1 product

1 product

1 product

1 product

2 products

Suse Linux Enterprise Desktop

Suse Linux Enterprise Server

Debian

1 product

Debian Linux

Avaya

8 products

Communication Manager

Expanded Meet Me Conferencing

Intuity Audix Lx

Meeting Exchange

Message Networking

Messaging Storage Server

Proactive Contact

Sip Enablement Services

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 2.6.25.10

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 6.06
Canonical Ubuntu Linux	Version 7.04
Canonical Ubuntu Linux	Version 7.10
Canonical Ubuntu Linux	Version 8.04

Configuration C

7 vulnerable

Vulnerable Software	Affected Versions
Novell Linux Desktop	Version 9
Opensuse Opensuse	Version 10.3
Opensuse Opensuse	Version 11.0
Suse Suse Linux Enterprise Desktop	Version 10 sp1
Suse Suse Linux Enterprise Desktop	Version 10 sp2
Suse Suse Linux Enterprise Server	Version 10 sp1
Suse Suse Linux Enterprise Server	Version 10 sp2

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 4.0

Configuration E

9 vulnerable

Vulnerable Software	Affected Versions
Avaya Communication Manager	From 3.1
Avaya Expanded Meet Me Conferencing	All versions
Avaya Intuity Audix Lx	Version 2.0
Avaya Meeting Exchange	Version 5.0
Avaya Message Networking	Version 3.1
Avaya Messaging Storage Server	Version 4.0
Avaya Proactive Contact	Version 4.0
Avaya Sip Enablement Services	All versions
Avaya Sip Enablement Services	Version 4.0

Related CWEs

CWE-476

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (66)

http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git%3Ba=commitdiff%3Bh=2a739dd53ad7ee010ae6e155438507f329dce788

Source: secalert@redhat.com

http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.10

Source: secalert@redhat.com

Broken Link

http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00007.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00009.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00012.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00000.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00003.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://secunia.com/advisories/30982

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/31048

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/31202

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/31229

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/31341

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/31551

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/31614

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/31685

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/32103

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/32370

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/32759

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/33201

Source: secalert@redhat.com

Broken Link

http://support.avaya.com/elmodocs2/security/ASA-2008-365.htm

Source: secalert@redhat.com

Third Party Advisory

http://www.debian.org/security/2008/dsa-1630

Source: secalert@redhat.com

PatchThird Party Advisory

http://www.openwall.com/lists/oss-security/2008/07/03/2

Source: secalert@redhat.com

Mailing ListPatchThird Party Advisory

http://www.redhat.com/support/errata/RHSA-2008-0612.html

Source: secalert@redhat.com

Broken Link

http://www.redhat.com/support/errata/RHSA-2008-0665.html

Source: secalert@redhat.com

Broken Link

http://www.redhat.com/support/errata/RHSA-2008-0973.html

Source: secalert@redhat.com

Broken Link

http://www.securityfocus.com/bid/30076

Source: secalert@redhat.com

PatchThird Party AdvisoryVDB Entry

http://www.vupen.com/english/advisories/2008/2063/references

Source: secalert@redhat.com

Broken Link

https://exchange.xforce.ibmcloud.com/vulnerabilities/43687

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11632

Source: secalert@redhat.com

Third Party Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6633

Source: secalert@redhat.com

Third Party Advisory

https://usn.ubuntu.com/637-1/

Source: secalert@redhat.com

Third Party Advisory

http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.25.y.git%3Ba=commitdiff%3Bh=2a739dd53ad7ee010ae6e155438507f329dce788