CVE-2008-4395
Multiple buffer overflows in the ndiswrapper module 1.53 for the Linux kernel 2.6 allow remote...
Multiple buffer overflows in the ndiswrapper module 1.53 for the Linux kernel 2.6 allow remote attackers to execute arbitrary code by sending packets over a local wireless network that specify long ESSIDs.
Exploit likelihood
What each source reports
NVD Score used
Multiple buffer overflows in the ndiswrapper module 1.53 for the Linux kernel 2.6 allow remote attackers to execute arbitrary code by sending packets over a local wireless network that specify long ESSIDs.
- Record
CVE-2008-4395- CVSS 2.0
- 8.3 High
AV:A/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Multiple buffer overflows in the ndiswrapper module 1.53 for the Linux kernel 2.6 allow remote attackers to execute arbitrary code by sending packets over a local wireless network that specify long ESSIDs.
- Record
CVE-2008-4395- Updated
- 2026-11-02
EUVDEUVD-2008-4376 No score
Multiple buffer overflows in the ndiswrapper module 1.53 for the Linux kernel 2.6 allow remote attackers to execute arbitrary code by sending packets over a local wireless network that specify long ESSIDs.
- Record
EUVD-2008-4376- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cfmc-g2m2-7ffx No score
Multiple buffer overflows in the ndiswrapper module 1.53 for the Linux kernel 2.6 allow remote...
Multiple buffer overflows in the ndiswrapper module 1.53 for the Linux kernel 2.6 allow remote attackers to execute arbitrary code by sending packets over a local wireless network that specify long ESSIDs.
- Record
GHSA-cfmc-g2m2-7ffx- Weakness
- CWE-119
- Updated
- 2026-11-02
OSVBELL-CVE-2008-4395
CVE-2008-4395 does not affect BellSoft software
- Record
BELL-CVE-2008-4395- CVSS 2.0
- 8.3 High
AV:A/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
OSV No score
Multiple buffer overflows in the ndiswrapper module 1.53 for the Linux kernel 2.6 allow remote attackers to execute arbitrary code by sending packets over a local wireless network that specify long ESSIDs.
- Record
CVE-2008-4395- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ndiswrapperDebian:4.0 |
before 1.28-1+etch1, plus listed versions 1.28-1 |
1.28-1+etch1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-4395 is a high vulnerability (CVSS 8.3) in Linux Kernel, published November 6, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.40%, the 84th percentile. Fixed in ndiswrapper 1.28-1+etch1.
References
mail-archive.com/frugalware-git%40frugalware.org/msg22366.html
exchange.xforce.ibmcloud.com/vulnerabilities/46437
ubuntu.com/usn/usn-662-2
bugs.launchpad.net/bugs/cve/2008-4395
bugs.gentoo.org/show_bug.cgi?id=239371
Show 11 moreShow less
secunia.com/advisories/32509
securitytracker.com/id?1021142
git.frugalware.org/gitweb/gitweb.cgi?p=frugalware-current.git%3Ba=commitdiff%3Bh=49945b423c2f7e33b4c579ca460df6a806ee8f9f
lists.opensuse.org/opensuse-security-announce/2008-12/msg00001.html
securityfocus.com/bid/32118
nvd.nist.gov/vuln/detail/CVE-2008-4395
github.com/advisories/GHSA-cfmc-g2m2-7ffx
docs.bell-sw.com/security/cves/CVE-2008-4395