CVE-2008-5396 in Zaptel信息

摘要

由 VulDB • 2026-07-06

Zaptel (aka DAHDI) 1.4.11及更早版本中，(1) torisa.c和(2) dahdi/tor2.c驱动程序存在数组索引错误。属于dialout组的本地用户可以通过向/dev/zap/ctl写入数据来覆盖内核内存中的整数值，这与ZT_SPANCONFIG ioctl关联的sync字段缺少验证有关。

If you want to get best quality of vulnerability data, you may have to visit VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2008-12-08

披露

2008-12-08

管理

已接受

条目

VDB-45356

CPE

准备好

CWE

CWE-189 (已确认)

CVSS

7.2 (NVD)

EPSS

0.00348

KEV

否

活动

非常低

部门

Chemical, Hostingprovider, ...

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2008-5396
NVD	https://nvd.nist.gov/vuln/detail/CVE-2008-5396
CVE Details	https://www.cvedetails.com/cve/CVE-2008-5396/

◂ 上一步一览下一步 ▸

Want to know what is going to be exploited?

We predict KEV entries!