CVE-2008-1367 Memory corruption in n/a
GCC compiler flaw causes incorrect string manipulation code generation, potentially leading to memory corruption and denial of service in Linux kernel signal handling.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Not stated
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2008-1367?
CVE-2008-1367 is a high-severity memory corruption vulnerability in n/a, published on 17 Mar 2008.
Official description
gcc 4.3.x does not generate a cld instruction while compiling functions used for string manipulation such as memcpy and memmove on x86 and i386, which can prevent the direction flag (DF) from being reset in violation of ABI conventions and cause data to be copied in the wrong direction during signal handling in the Linux kernel, which might allow context-dependent attackers to trigger memory corruption. NOTE: this issue was originally reported for CPU consumption in SBCL.
Weakness: CWE-399
Which versions are affected by CVE-2008-1367?
It affects 1 product.
Products include Gnu Gcc.
How do I fix CVE-2008-1367?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2008-1367 being exploited?
There is no known exploitation of CVE-2008-1367 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as DEBIAN-CVE-2008-1367, GHSA-mh8h-6q9x-8j58.