DEBIAN-CVE-2008-1391

Advisory lineage Upstream: 1 Downstream: 1
Upstream
CVE-2008-1391
Downstream
DSA-2058-1
Published: 27 Mar 2008, 17:44
Last modified:28 Apr 2026, 20:10

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

27 Mar 2008, 17:44
Published
Vulnerability first disclosed
28 Apr 2026, 20:10
Last Modified
Vulnerability information updated

Description

Multiple integer overflows in libc in NetBSD 4.x, FreeBSD 6.x and 7.x, and probably other BSD and Apple Mac OS platforms allow context-dependent attackers to execute arbitrary code via large values of certain integer fields in the format argument to (1) the strfmon function in lib/libc/stdlib/strfmon.c, related to the GET_NUMBER macro; and (2) the printf function, related to left_prec and right_prec.

Affected Systems

  • debian•glibc

    < 2.11-1 | < 2.11-1 | < 2.11-1 | < 2.11-1

References (1)