CVE-2008-1440

HIGH Year: 2008
CVSS v2 Score
7.1
High
Weakness Type
CWE-1284
View all →

Vulnerability Description

Microsoft Windows XP SP2 and SP3, and Server 2003 SP1 and SP2, does not properly validate the option length field in Pragmatic General Multicast (PGM) packets, which allows remote attackers to cause a denial of service (infinite loop and system hang) via a crafted PGM packet, aka the "PGM Invalid Length Vulnerability."

Related Vulnerabilities

CVE-2008-2374

CRITICAL
CVSS:9.8(Critical)

src/sdp.c in bluez-libs 3.30 in BlueZ, and other bluez-libs before 3.34 and bluez-utils before 3.34 versions, does not validate string length fields in SDP packets, which allows remote SDP servers to ...

CWE-12842008

CVE-2021-31556

CRITICAL
CVSS:9.8(Critical)

An issue was discovered in the Oauth extension for MediaWiki through 1.35.2. MWOAuthConsumerSubmitControl.php does not ensure that the length of an RSA key will fit in a MySQL blob.

CWE-12842021

CVE-2021-43267

CRITICAL
CVSS:9.8(Critical)

An issue was discovered in net/tipc/crypto.c in the Linux kernel before 5.14.16. The Transparent Inter-Process Communication (TIPC) functionality allows remote attackers to exploit insufficient valida...

CWE-12842021

CVE-2022-20385

CRITICAL
CVSS:9.8(Critical)

a function called 'nla_parse', do not check the len of para, it will check nla_type (which can be controlled by userspace) with 'maxtype' (in this case, it is GSCAN_MAX), then it access polciy array '...

CWE-12842022

CVE-2022-25727

CRITICAL
CVSS:9.8(Critical)

Memory Corruption in modem due to improper length check while copying into memory in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music

CWE-12842022

CVE-2022-37134

CRITICAL
CVSS:9.8(Critical)

D-link DIR-816 A2_v1.10CNB04.img is vulnerable to Buffer Overflow via /goform/form2Wan.cgi. When wantype is 3, l2tp_usrname will be decrypted by base64, and the result will be stored in v94, which doe...

CWE-12842022