CVE-2008-0122
NoneCVSS
—
EPSS
12.4%
Published
Jan 16, 2008
CISA due date
—
The record
Off-by-one error in the inet_network function in libbind in ISC BIND 9.4.2 and earlier, as used in libc in FreeBSD 6.2 through 7.0-PRERELEASE, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted input that triggers memory corruption.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | glibc | 0 | 2.2-1 |
| Debian:12 | glibc | 0 | 2.2-1 |
| Debian:13 | glibc | 0 | 2.2-1 |
| Debian:14 | glibc | 0 | 2.2-1 |
| Red Hat:enterprise_linux:5::client | bind | 0 | 30:9.3.4-6.P1.el5 |
| Red Hat:enterprise_linux:5::client | bind-chroot | 0 | 30:9.3.4-6.P1.el5 |
| Red Hat:enterprise_linux:5::client | bind-debuginfo | 0 | 30:9.3.4-6.P1.el5 |
| Red Hat:enterprise_linux:5::client | bind-devel | 0 | 30:9.3.4-6.P1.el5 |
| Red Hat:enterprise_linux:5::client | bind-libbind-devel | 0 | 30:9.3.4-6.P1.el5 |
| Red Hat:enterprise_linux:5::client | bind-libs | 0 | 30:9.3.4-6.P1.el5 |
| Red Hat:enterprise_linux:5::client | bind-sdb | 0 | 30:9.3.4-6.P1.el5 |
| Red Hat:enterprise_linux:5::client | bind-utils | 0 | 30:9.3.4-6.P1.el5 |
| Red Hat:enterprise_linux:5::client | caching-nameserver | 0 | 30:9.3.4-6.P1.el5 |
| Red Hat:enterprise_linux:5::client_workstation | bind | 0 | 30:9.3.4-6.P1.el5 |
| Red Hat:enterprise_linux:5::client_workstation | bind-chroot | 0 | 30:9.3.4-6.P1.el5 |
| Red Hat:enterprise_linux:5::client_workstation | bind-debuginfo | 0 | 30:9.3.4-6.P1.el5 |
| Red Hat:enterprise_linux:5::client_workstation | bind-devel | 0 | 30:9.3.4-6.P1.el5 |
| Red Hat:enterprise_linux:5::client_workstation | bind-libbind-devel | 0 | 30:9.3.4-6.P1.el5 |
| Red Hat:enterprise_linux:5::client_workstation | bind-libs | 0 | 30:9.3.4-6.P1.el5 |
| Red Hat:enterprise_linux:5::client_workstation | bind-sdb | 0 | 30:9.3.4-6.P1.el5 |
| Red Hat:enterprise_linux:5::client_workstation | bind-utils | 0 | 30:9.3.4-6.P1.el5 |
| Red Hat:enterprise_linux:5::client_workstation | caching-nameserver | 0 | 30:9.3.4-6.P1.el5 |
| Red Hat:enterprise_linux:5::server | bind | 0 | 30:9.3.4-6.P1.el5 |
| Red Hat:enterprise_linux:5::server | bind-chroot | 0 | 30:9.3.4-6.P1.el5 |
| Red Hat:enterprise_linux:5::server | bind-debuginfo | 0 | 30:9.3.4-6.P1.el5 |
| Red Hat:enterprise_linux:5::server | bind-devel | 0 | 30:9.3.4-6.P1.el5 |
| Red Hat:enterprise_linux:5::server | bind-libbind-devel | 0 | 30:9.3.4-6.P1.el5 |
| Red Hat:enterprise_linux:5::server | bind-libs | 0 | 30:9.3.4-6.P1.el5 |
| Red Hat:enterprise_linux:5::server | bind-sdb | 0 | 30:9.3.4-6.P1.el5 |
| Red Hat:enterprise_linux:5::server | bind-utils | 0 | 30:9.3.4-6.P1.el5 |
| Red Hat:enterprise_linux:5::server | caching-nameserver | 0 | 30:9.3.4-6.P1.el5 |
Related vulnerabilities
- CVE-2021-3326 The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when… Also affects glibc
- CVE-2009-5155 In the GNU C Library (aka glibc or libc6) before 2.28, parse_reg_exp in posix/regcomp.c… Also affects glibc
- CVE-2017-12133 Use-after-free vulnerability in the clntudp_call function in sunrpc/clnt_udp.c in the GNU… Also affects glibc
- CVE-2015-5180 res_query in libresolv in glibc before 2.25 allows remote attackers to cause a denial of… Also affects glibc
- CVE-2017-1000366 glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to… Also affects glibc
- CVE-2014-9984 nscd in the GNU C Library (aka glibc or libc6) before version 2.20 does not correctly… Also affects glibc
- CVE-2016-10228 The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when… Also affects glibc
- CVE-2016-4429 Stack-based buffer overflow in the clntudp_call function in sunrpc/clnt_udp.c in the GNU… Also affects glibc