CVE-2008-1279 Denial of service in n/a

What is CVE-2008-1279?

CVE-2008-1279 is a medium-severity denial of service vulnerability in n/a, published on 10 Mar 2008. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Acronis True Image Group Server 1.5.19.191 and earlier, included in Acronis True Image Enterprise Server 9.5.0.8072 and the other True Image packages, allows remote attackers to cause a denial of service (crash) via a packet with an invalid length field, which causes an out-of-bounds read.

Weakness: CWE-20

Which versions are affected by CVE-2008-1279?

It affects 1 product.

Products include Acronis True Image.

How do I fix CVE-2008-1279?

No fix has been published for CVE-2008-1279 yet. Limit exposure of the affected software until one is available.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2008-1279 being exploited?

There is no known exploitation of CVE-2008-1279 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2017-3219 Supply chain in True Image High 8.8
• CVE-2021-32576 Path traversal in n/a High 7.8
• CVE-2021-32577 Privilege escalation in n/a High 7.8
• CVE-2021-32578 Path traversal in n/a High 7.8
• CVE-2021-32579 Auth bypass in n/a High 7.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-4xjg-cx39-6f72.