CveMateVulnerability intelligence

CVE-2008-2812: avaya communication_manager NULL Pointer Dereference

Modified

Published 09-07-2008Last modified 07-08-2024

Vulnerability summary

CVE-2008-2812 is a high (CVSS 7.8) NULL Pointer Dereference vulnerability in avaya communication_manager. EPSS estimates a 0.43% chance of exploitation in the next 30 days, higher than 36.9% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 7.8, local access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

7.8/10

010

High · v3.1 (NVD)

EPSS score

0.43%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 4

DSA-1630-1 RHSA-2008:0612 RHSA-2008:0665 RHSA-2008:0973

Timeline

09-07-2008
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

The Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving NULL pointer dereference of function pointers in (1) hamradio/6pack.c, (2) hamradio/mkiss.c, (3) irda/irtty-sir.c, (4) ppp_async.c, (5) ppp_synctty.c, (6) slip.c, (7) wan/x25_asy.c, and (8) wireless/strip.c in drivers/net/.

CVSS metrics

2 scores · 1 source · 2 versions

v3.17.8v2.07.2

EPSS trend

Probability

0.43%

Chance of exploitation in the next 30 days

Percentile

37%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.43% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-476NULL Pointer DereferenceThe product dereferences a pointer that it expects to be valid but is NULL.

Affected systems

Version check

Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Avaya7 products

communication_manager≥ 3.1 (No fix recorded)
intuity_audix_lx2.0
meeting_exchange5.0
message_networking3.1
messaging_storage_server4.0

Show all 7

Suse2 products

suse_linux_enterprise_desktop10:sp1 | 10:sp2
suse_linux_enterprise_server10:sp1 | 10:sp2

Canonical1 product

ubuntu_linuxEOL6.06 | 7.04 | 7.10 | 8.04

Debian1 product

debian_linuxEOL4.0

Linux1 product

linux_kernel< 2.6.25.10

Novell1 product

linux_desktop9

Opensuse1 product

opensuseEOL10.3 | 11.0

7 vendors · 14 products

References

33 links

lists.opensuse.org/opensuse-security-announce/2008-10/msg00000.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.debian.org/security/2008/dsa-1630Vendor AdvisoryX Refsource DEBIANPatchThird Party Advisory
www.vupen.com/english/advisories/2008/2063/referencesVDB EntryX Refsource VUPENBroken Link
git.kernel.orgX Refsource CONFIRM
lists.opensuse.org/opensuse-security-announce/2008-07/msg00012.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
usn.ubuntu.com/637-1/Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2008-07/msg00007.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.openwall.com/lists/oss-security/2008/07/03/2Mailing ListX Refsource MLISTPatchThird Party Advisory
secunia.com/advisories/31614Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/31685Third Party AdvisoryX Refsource SECUNIABroken Link

Show all 33 references

secunia.com/advisories/31341Third Party AdvisoryX Refsource SECUNIABroken Link
lists.opensuse.org/opensuse-security-announce/2008-10/msg00008.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
secunia.com/advisories/30982Third Party AdvisoryX Refsource SECUNIABroken Link
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11632VDB EntrySignatureX Refsource OVALThird Party Advisory
secunia.com/advisories/31551Third Party AdvisoryX Refsource SECUNIABroken Link
www.redhat.com/support/errata/RHSA-2008-0665.htmlVendor AdvisoryX Refsource REDHATBroken Link
secunia.com/advisories/32103Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/31048Third Party AdvisoryX Refsource SECUNIABroken Link
www.securityfocus.com/bid/30076VDB EntryX Refsource BIDPatchThird Party Advisory
secunia.com/advisories/32759Third Party AdvisoryX Refsource SECUNIABroken Link
exchange.xforce.ibmcloud.com/vulnerabilities/43687VDB EntryX Refsource XFThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2008-07/msg00009.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
secunia.com/advisories/32370Third Party AdvisoryX Refsource SECUNIABroken Link
www.redhat.com/support/errata/RHSA-2008-0973.htmlVendor AdvisoryX Refsource REDHATBroken Link
www.redhat.com/support/errata/RHSA-2008-0612.htmlVendor AdvisoryX Refsource REDHATBroken Link
secunia.com/advisories/31202Third Party AdvisoryX Refsource SECUNIABroken Link
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6633VDB EntrySignatureX Refsource OVALThird Party Advisory
kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.25.10X Refsource CONFIRMBroken Link
support.avaya.com/elmodocs2/security/ASA-2008-365.htmX Refsource CONFIRMThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2008-10/msg00003.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
secunia.com/advisories/33201Third Party AdvisoryX Refsource SECUNIABroken Link
secunia.com/advisories/31229Third Party AdvisoryX Refsource SECUNIABroken Link