CVE-2008-1552 : The silc_pkcs1_decode function in the silccrypt library (silcpkcs1.c) in Secure

The silc_pkcs1_decode function in the silccrypt library (silcpkcs1.c) in Secure Internet Live Conferencing (SILC) Toolkit before 1.1.7, SILC Client before 1.1.4, and SILC Server before 1.1.2 allows remote attackers to execute arbitrary code via a crafted PKCS#1 message, which triggers an integer underflow, signedness error, and a buffer overflow. NOTE: the researcher describes this as an integer overflow, but CVE uses the "underflow" term in cases of wraparound from unsigned subtraction.

Published 2008-03-31 17:44:00

Updated 2018-10-11 20:35:28

Source MITRE

View at NVD, CVE.org

Vulnerability category: OverflowExecute code

Products affected by CVE-2008-1552

Silc » Silc Client
Versions up to, including, (<=) 1.1.3
cpe:2.3:a:silc:silc_client:*:*:*:*:*:*:*:*
Matching versions
Silc » Silc Toolkit
Versions up to, including, (<=) 1.1.6
cpe:2.3:a:silc:silc_toolkit:*:*:*:*:*:*:*:*
Matching versions
Silc » Silc Server
Versions up to, including, (<=) 1.1.2
cpe:2.3:a:silc:silc_server:*:*:*:*:*:*:*:*
Matching versions
Silc » Silc
cpe:2.3:a:silc:silc:*:*:*:*:*:*:*:*
Matching versions
When used together with: Redhat » Fedora » Version: 7
When used together with: Redhat » Fedora » Version: 8

Exploit prediction scoring system (EPSS) score for CVE-2008-1552

EPSS FAQ

13.82%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 96 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2008-1552

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P	8.6	6.4	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

CWE ids for CVE-2008-1552

CWE-189

Assigned by: nvd@nist.gov (Primary)

Vendor statements for CVE-2008-1552

Red Hat 2008-04-23

Red Hat does not consider this issue to be a security flaw as SILC is not used in a vulnerable manner in Red Hat Enterprise Linux 4 and 5. More information can be found here: https://bugzilla.redhat.com/show_bug.cgi?id=440049

References for CVE-2008-1552

http://www.coresecurity.com/?action=item&id=2206
http://www.mandriva.com/security/advisories?name=MDVSA-2008:158

CVEs referencing this url
http://www.vupen.com/english/advisories/2008/0974/references
http://security.gentoo.org/glsa/glsa-200804-27.xml

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html

[security-announce] SUSE Security Summary Report SUSE-SR:2008:08 - openSUSE Security Announce - openSUSE Mailing Lists

CVEs referencing this url
http://silcnet.org/general/news/?item=server_20080320_1

Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/41474
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00513.html
http://silcnet.org/general/news/?item=toolkit_20080320_1

Patch
http://www.securityfocus.com/bid/28373

Patch
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00538.html
http://www.securitytracker.com/id?1019690
http://securityreason.com/securityalert/3795
http://silcnet.org/general/news/?item=client_20080320_1

Patch
http://www.securityfocus.com/archive/1/490069/100/0/threaded