Buffer overflow in Swapoff Op

CVE-2008-3229

Stack-based buffer overflow in op before Changeset 563, when xauth support is enabled, allows local users to gain privileges via a long XAUTHORITY environment variable.

Vulnerability class: Buffer Overflow

EPSS: 0.004 (35.5th percentile) — read the EPSS interpretation.

Affected products

  • Swapoff Op — versions 1.1.10, 1.1.19, 1.20
  • N/a — versions n/a

Weakness classification (CWE)

References