Buffer overflow in Red Hat Cman
CVE-2008-6560
Buffer overflow in CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9 and Red Hat Enterprise Linux (RHEL) 5 allows attackers to cause a denial of service (CPU consumption and memory corruption) via a cluster.conf file with many lines. NOTE: it is not clear whether this issue crosses privilege boundaries in realistic uses of the product.
Vulnerability class: Buffer Overflow
EPSS: 0.023 (82.3th percentile) — read the EPSS interpretation.
Affected products
- Redhat Cman — versions 2.03.03-1, 2.03.04-1, 2.03.05-1
- Redhat Fedora — versions 9
- Redhat Linux — versions 5.0
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (vendor-advisory, x_refsource_FEDORA)
- cve@mitre.org (x_refsource_UBUNTU, vendor-advisory)
- cve@mitre.org (vendor-advisory, x_refsource_FEDORA, Vendor Advisory)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- cve@mitre.org (vendor-advisory, x_refsource_FEDORA)