Skip to content
OpenAdvisories
Unscored CVE-2004-0658 EUVD-2004-0657GHSA-3xqp-j7cf-5q64

Integer overflow in the hpsb_alloc_packet function (incorrectly reported as alloc_hpsb_packet) in IEEE 1394 (Firewire) driver 2.4 and 2.6 a…

Published Jul 13, 2004 · Updated Aug 8, 2024 · Assigned by mitre

Description

Integer overflow in the hpsb_alloc_packet function (incorrectly reported as alloc_hpsb_packet) in IEEE 1394 (Firewire) driver 2.4 and 2.6 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via the functions (1) raw1394_write, (2) state_connected, (3) handle_remote_request, or (4) hpsb_make_writebpacket.

References