CVE-2008-1391
Multiple integer overflows in libc in NetBSD 4.x, FreeBSD 6.x and 7.x, and probably other BSD and...
Multiple integer overflows in libc in NetBSD 4.x, FreeBSD 6.x and 7.x, and probably other BSD and Apple Mac OS platforms allow context-dependent attackers to execute arbitrary code via large values of certain integer fields in the format argument to (1) the strfmon function in lib/libc/stdlib/strfmon.c, related to the GET_NUMBER macro; and (2) the printf function, related to left_prec and right_prec.
Exploit likelihood
What each source reports
NVD Score used
Multiple integer overflows in libc in NetBSD 4.x, FreeBSD 6.x and 7.x, and probably other BSD and Apple Mac OS platforms allow context-dependent attackers to execute arbitrary code via large values of certain integer fields in the format argument to (1) the strfmon function in lib/libc/stdlib/strfmon.c, related to the GET_NUMBER macro; and (2) the printf function, related to left_prec and right_prec.
- Record
CVE-2008-1391- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE List No score
Multiple integer overflows in libc in NetBSD 4.x, FreeBSD 6.x and 7.x, and probably other BSD and Apple Mac OS platforms allow context-dependent attackers to execute arbitrary code via large values of certain integer fields in the format argument to (1) the strfmon function in lib/libc/stdlib/strfmon.c, related to the GET_NUMBER macro; and (2) the printf function, related to left_prec and right_prec.
- Record
CVE-2008-1391- Updated
- 2026-11-02
EUVDEUVD-2008-1398 No score
Multiple integer overflows in libc in NetBSD 4.x, FreeBSD 6.x and 7.x, and probably other BSD and Apple Mac OS platforms allow context-dependent attackers to execute arbitrary code via large values of certain integer fields in the format argument to (1) the strfmon function in lib/libc/stdlib/strfmon.c, related to the GET_NUMBER macro; and (2) the printf function, related to left_prec and right_prec.
- Record
EUVD-2008-1398- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7w79-2w84-7wvc No score
Multiple integer overflows in libc in NetBSD 4.x, FreeBSD 6.x and 7.x, and probably other BSD and...
Multiple integer overflows in libc in NetBSD 4.x, FreeBSD 6.x and 7.x, and probably other BSD and Apple Mac OS platforms allow context-dependent attackers to execute arbitrary code via large values of certain integer fields in the format argument to (1) the strfmon function in lib/libc/stdlib/strfmon.c, related to the GET_NUMBER macro; and (2) the printf function, related to left_prec and right_prec.
- Record
GHSA-7w79-2w84-7wvc- Updated
- 2026-11-02
OSV No score
Multiple integer overflows in libc in NetBSD 4.x, FreeBSD 6.x and 7.x, and probably other BSD and Apple Mac OS platforms allow context-dependent attackers to execute arbitrary code via large values of certain integer fields in the format argument to (1) the strfmon function in lib/libc/stdlib/strfmon.c, related to the GET_NUMBER macro; and (2) the printf function, related to left_prec and right_prec.
- Record
CVE-2008-1391- Updated
- 2026-11-02
OSVDEBIAN-CVE-2008-1391 No score
Multiple integer overflows in libc in NetBSD 4.x, FreeBSD 6.x and 7.x, and probably other BSD and Apple Mac OS platforms allow context-dependent attackers to execute arbitrary code via large values of certain integer fields in the format argument to (1) the strfmon function in lib/libc/stdlib/strfmon.c, related to the GET_NUMBER macro; and (2) the printf function, related to left_prec and right_prec.
- Record
DEBIAN-CVE-2008-1391- Updated
- 2026-11-02
Affected products
Affected packages
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | BSD (Multiple Distributions) - 'strfmon()' Integer Overflow | 2008-03-27 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-1391 is a high vulnerability (CVSS 7.5) in Freebsd, published March 27, 2008. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 18.8%, the 97th percentile. Fixed in glibc 2.11-1.
References
securityfocus.com/bid/28479
vupen.com/english/advisories/2008/3444
us-cert.gov/cas/techalerts/TA08-350A.html
exchange.xforce.ibmcloud.com/vulnerabilities/41504
secunia.com/advisories/33179
Show 12 moreShow less
securityreason.com/securityalert/3770
lists.opensuse.org/opensuse-security-announce/2010-10/msg00007.html
cvsweb.netbsd.org/bsdweb.cgi/src/lib/libc/stdlib/strfmon.c
support.apple.com/kb/HT3338
debian.org/security/2010/dsa-2058
lists.apple.com/archives/security-announce//2008//Dec/msg00000.html
securitytracker.com/id?1019722
nvd.nist.gov/vuln/detail/CVE-2008-1391
github.com/advisories/GHSA-7w79-2w84-7wvc
security-tracker.debian.org/tracker/CVE-2008-1391