CVE-2008-3746 — Neon vulnerability

7 documents7 sources
Severity
4.3MEDIUMNVD
EPSS
1.7%
top 17.85%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Debian Neon27Webdav Neon
Timeline
PublishedAug 27
Latest updateMay 2

Description

neon 0.28.0 through 0.28.2 allows remote servers to cause a denial of service (NULL pointer dereference and crash) via vectors related to Digest authentication, Digest domain parameter support, and the parse_domain function.

CVSS vector

AV:N/AC:M/C:N/I:N/A:PExploitability: 8.6 | Impact: 2.9

Affected Packages2 packages

▶debiandebian/neon27< neon27 0.28.2-4 (bookworm)
▶NVDwebdav/neon0.28.0, 0.28.1, 0.28.2+2

Patches

Patch: lists.manyfish.co.uk ↗Patch: lists.manyfish.co.uk ↗

🔴Vulnerability Details

2
GHSA
GHSA-7mww-385g-p2jf: neon 0↗2022-05-02
▶
OSV
CVE-2008-3746: neon 0↗2008-08-27
▶

📋Vendor Advisories

3
Ubuntu
neon vulnerabilities↗2009-09-21
▶
Red Hat
neon: NULL ptr dereference in the Digest authentication support (DoS possible)↗2008-08-15
▶
Debian
CVE-2008-3746: neon27 - neon 0.28.0 through 0.28.2 allows remote servers to cause a denial of service (N...↗2008
▶

💬Community

1
Bugzilla
CVE-2008-3746 neon: NULL ptr dereference in the Digest authentication support (DoS possible)↗2008-08-20
▶