CVE-2008-1948 Memory corruption in n/a
Remote attackers can cause a crash or execute arbitrary code via a buffer overflow in GnuTLS server name extension handling.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2008-1948?
CVE-2008-1948 is a critical memory corruption vulnerability in Gnu Gnutls, published on 21 May 2008. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The _gnutls_server_name_recv_params function in lib/ext_server_name.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 does not properly calculate the number of Server Names in a TLS 1.0 Client Hello message during extension handling, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a zero value for the length of Server Names, which leads to a buffer overflow in session resumption data in the pack_security_parameters function, aka GNUTLS-SA-2008-1-1.
Weakness: CWE-189
Which versions are affected by CVE-2008-1948?
It affects 1 product.
Products include Gnu Gnutls.
How do I fix CVE-2008-1948?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2008-1948 being exploited?
There is no known exploitation of CVE-2008-1948 in the wild and no public exploit code.
Other vulnerabilities in Gnu Gnutls
Sources
Also known as GHSA-pc6g-9pg3-9q52.