CVE-2008-4395

Published: Nov 6, 2008Modified: Apr 23, 2026

8.3

Vector

AV:A/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 6.5 / Impact: 10.0

Source: NVD

Description

Multiple buffer overflows in the ndiswrapper module 1.53 for the Linux kernel 2.6 allow remote attackers to execute arbitrary code by sending packets over a local wireless network that specify long ESSIDs.

Affected (2)

Products: Linux: Linux Kernel · Ubuntu: Linux Kernel

1 product

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Version 2.6
Ubuntu Linux Kernel	Up to 2.6.26

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (24)

http://bugs.gentoo.org/show_bug.cgi?id=239371

Source: security@ubuntu.com

http://git.frugalware.org/gitweb/gitweb.cgi?p=frugalware-current.git%3Ba=commitdiff%3Bh=49945b423c2f7e33b4c579ca460df6a806ee8f9f

Source: security@ubuntu.com

http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00001.html

Source: security@ubuntu.com

http://secunia.com/advisories/32509

Source: security@ubuntu.com

Vendor Advisory

http://www.mail-archive.com/frugalware-git%40frugalware.org/msg22366.html

Source: security@ubuntu.com

http://www.securityfocus.com/bid/32118

Source: security@ubuntu.com

http://www.securitytracker.com/id?1021142

Source: security@ubuntu.com

http://www.ubuntu.com/usn/usn-662-1

Source: security@ubuntu.com

http://www.ubuntu.com/usn/usn-662-2

Source: security@ubuntu.com

https://bugs.launchpad.net/bugs/cve/2008-4395

Source: security@ubuntu.com

https://bugs.launchpad.net/ubuntu/+source/linux/+bug/275860

Source: security@ubuntu.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/46437

Source: security@ubuntu.com

http://bugs.gentoo.org/show_bug.cgi?id=239371