CVE Database
/

CVE-2008-1367

Back to search

CVE-2008-1367

Published: Mar 17, 2008

Modified: Aug 7, 2024

PUBLISHED

Description

gcc 4.3.x does not generate a cld instruction while compiling functions used for string manipulation such as memcpy and memmove on x86 and i386, which can prevent the direction flag (DF) from being reset in violation of ABI conventions and cause data to be copied in the wrong direction during signal handling in the Linux kernel, which might allow context-dependent attackers to trigger memory corruption. NOTE: this issue was originally reported for CPU consumption in SBCL.

VendorProductVersions

n/a

n/a

affected
n/a

References

30962
third-party-advisory
x_refsource_SECUNIA
30850
third-party-advisory
x_refsource_SECUNIA
30116
third-party-advisory
x_refsource_SECUNIA
RHSA-2008:0233
vendor-advisory
x_refsource_REDHAT
30110
third-party-advisory
x_refsource_SECUNIA
SUSE-SA:2008:031
vendor-advisory
x_refsource_SUSE
ADV-2008-2222
vdb-entry
x_refsource_VUPEN
29084
vdb-entry
x_refsource_BID
gcc-cld-dos(41340)
vdb-entry
x_refsource_XF
RHSA-2008:0211
vendor-advisory
x_refsource_REDHAT
oval:org.mitre.oval:def:11108
vdb-entry
signature
x_refsource_OVAL
30890
third-party-advisory
x_refsource_SECUNIA
RHSA-2008:0508
vendor-advisory
x_refsource_REDHAT
SUSE-SA:2008:030
vendor-advisory
x_refsource_SUSE
31246
third-party-advisory
x_refsource_SECUNIA
30818
third-party-advisory
x_refsource_SECUNIA
SUSE-SA:2008:032
vendor-advisory
x_refsource_SUSE

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now