CVE-2008-2092

Linksys SPA-2102 Phone Adapter 3.3.6 allows remote attackers to cause a denial of service (crash) via a long ping packet ("ping of death"). NOTE: the severity of this issue has been disputed since there are limited attack scenarios.

Score

CVSS 2.0 7.8 High

Status

Modified - cve@mitre.org

Published

2008-05-06

Last modified

2024-08-07

Weaknesses

CWE-399

Affected products

• Spa-2102 Phone Adapter (Linksys)

References

• http://marc.info/?l=bugtraq&m=120637257800425&w=2
• http://marc.info/?l=bugtraq&m=120637551306325&w=2
• http://marc.info/?l=bugtraq&m=120638162819268&w=2
• http://marc.info/?l=bugtraq&m=120638296821936&w=2
• http://marc.info/?l=bugtraq&m=120645736414059&w=2
• http://secunia.com/advisories/29523
• http://www.securityfocus.com/bid/28414
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41436