Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2008-1391 — Integer Overflow or Wraparound in Freebsd

CWE-189CWE-190 — Integer Overflow or Wraparound13 documents9 sources
Severity
7.5HIGHNVD
EPSS
19.1%
top 4.66%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
3
GNU GlibcFreebsdNetbsd
Timeline
PublishedMar 27
Latest updateMay 1

Description

Multiple integer overflows in libc in NetBSD 4.x, FreeBSD 6.x and 7.x, and probably other BSD and Apple Mac OS platforms allow context-dependent attackers to execute arbitrary code via large values of certain integer fields in the format argument to (1) the strfmon function in lib/libc/stdlib/strfmon.c, related to the GET_NUMBER macro; and (2) the printf function, related to left_prec and right_prec.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

▶Debiangnu/glibc< 2.11-1+3

Also affects: Netbsd 4.0, Freebsd 6.0, 6.0_p5_release, 7.0, 7.0_beta4, 7.0_releng

🔴Vulnerability Details

3
GHSA
GHSA-7w79-2w84-7wvc: Multiple integer overflows in libc in NetBSD 4↗2022-05-01
▶
CVEList
CVE-2008-1391: Multiple integer overflows in libc in NetBSD 4↗2008-03-27
▶
OSV
CVE-2008-1391: Multiple integer overflows in libc in NetBSD 4↗2008-03-27
▶

💥Exploits & PoCs

1
Exploit-DB
BSD (Multiple Distributions) - 'strfmon()' Integer Overflow↗2008-03-27
▶

📋Vendor Advisories

5
Ubuntu
GNU C Library vulnerabilities↗2010-05-25
▶
Red Hat
(32-bit): Multiple integer overflows in the printf implementation↗2009-09-03
▶
Red Hat
glibc: strfmon format string problem↗2008-03-25
▶
Red Hat
(32-bit): Integer overflow in the __vstrfmon_l function↗2008-03-25
▶
Debian
CVE-2008-1391: glibc - Multiple integer overflows in libc in NetBSD 4.x, FreeBSD 6.x and 7.x, and proba...↗2008
▶

💬Community

3
Bugzilla
CVE-2009-4881 glibc (32-bit): Integer overflow in the __vstrfmon_l function↗2010-06-02
▶
Bugzilla
CVE-2009-4880 glibc (32-bit): Multiple integer overflows in the printf implementation↗2010-06-02
▶
Bugzilla
CVE-2008-1391 glibc: strfmon format string problem↗2009-09-21
▶
CVE-2008-1391 — Integer Overflow or Wraparound | cvebase