CVE-2008-1672: canonical ubuntu_linux NULL Pointer Dereference

EPSS trend

Probability

5.00%

Chance of exploitation in the next 30 days

Percentile

92%

Versus all other CVEs

30-day change

0.00 pp

From 5.00% on 18-09-2026

18-09-202618-10-2026

EPSS score

5.00%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

24 links

cert.fi/haavoittuvuudet/2008/advisory-openssl.htmlX Refsource MISCThird Party Advisory
slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.562004Vendor AdvisoryX Refsource SLACKWAREThird Party Advisory
secunia.com/advisories/30852Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/archives/fedora-package-announce/2008-May/msg01029.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/42667VDB EntryX Refsource XFThird Party Advisory
support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=738400X Refsource MISCThird Party Advisory
secunia.com/advisories/30460Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/30825Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2008/1680VDB EntryX Refsource VUPENPermissions RequiredThird Party Advisory
www.securityfocus.com/archive/1/492932/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry

Show all 24 references

www.ubuntu.com/usn/usn-620-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
secunia.com/advisories/30868Third Party AdvisoryX Refsource SECUNIA
www.openssl.org/news/secadv_20080528.txtX Refsource CONFIRMVendor Advisory
security.gentoo.org/glsa/glsa-200806-08.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
sourceforge.net/project/shownotes.php?release_id=615606X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/31288Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/30405Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/bid/29405VDB EntryX Refsource BIDPatchThird Party Advisory
www.securitytracker.com/id?1020122VDB EntryX Refsource SECTRACKThird Party Advisory
www.vupen.com/english/advisories/2008/1937/referencesVDB EntryX Refsource VUPENPermissions RequiredThird Party Advisory
secunia.com/advisories/31228Third Party AdvisoryX Refsource SECUNIA
www.mandriva.com/security/advisories?name=MDVSA-2008:107Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
www.kb.cert.org/vuls/id/520586Third Party AdvisoryX Refsource CERT VNUS Government Resource
security-tracker.debian.org/tracker/CVE-2008-1672Advisory

Related vulnerabilities

CVE-2018-0734alpinenodejs+2312.15%7y ago30-10-2018 12:00The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p).CVE-2018-0739alpineopenssl+5918.60%8y ago27-03-2018 21:00Constructed ASN.1 types with a recursive definition (such as can be found in PKCS7) could eventually exceed the stack given malicious input with excessive recursion. This could result in a Denial Of Service attack. There are no such structures used within SSL/TLS that come from untrusted sources so this is considered safe. Fixed in OpenSSL 1.1.0h (Affected 1.1.0-1.1.0g). Fixed in OpenSSL 1.0.2o (Affected 1.0.2b-1.0.2n).CVE-2018-0735alpinenodejs+324.72%7y ago29-10-2018 13:00The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.1.1a (Affected 1.1.1).CVE-2018-0733alpineopenssl+28.28%8y ago27-03-2018 21:00Because of an implementation bug the PA-RISC CRYPTO_memcmp function is effectively reduced to only comparing the least significant bit of each byte. This allows an attacker to forge messages that would be considered as authenticated in an amount of tries lower than that guaranteed by the security claims of the scheme. The module can only be compiled by the HP-UX assembler, so that only HP-UX PA-RISC targets are affected. Fixed in OpenSSL 1.1.0h (Affected 1.1.0-1.1.0g).CVE-2018-0732alpinelibressl+2948.83%8y ago12-06-2018 13:00During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client has finished. This could be exploited in a Denial Of Service attack. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2-1.0.2o).CVE-2018-12931canonicalubuntu_linux+1710.43%8y ago28-06-2018 14:00ntfs_attr_find in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a stack-based out-of-bounds write and cause a denial of service (kernel oops or panic) or possibly have unspecified other impact via a crafted ntfs filesystem.

All vulnerabilities inubuntu_linux openssl

CVE-2008-1672: canonical ubuntu_linux NULL Pointer Dereference

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References