gcc 4.3.x does not generate a cld instruction while compiling functions used for string…
Priority LOW 38CWE-399Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- Partial · Partial · Partial
- Fix status
- Fixed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-399 and the CVSS impact.
Summary
gcc 4.3.x does not generate a cld instruction while compiling functions used for string manipulation such as memcpy and memmove on x86 and i386, which can prevent the direction flag (DF) from being reset in violation of ABI conventions and cause data to be copied in the wrong direction during signal handling in the Linux kernel, which might allow context-dependent attackers to trigger memory corruption. NOTE: this issue was originally reported for CPU consumption in SBCL.
Why it matters now
EPSS 0.02791 86th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed Red Hat: 3 advisories
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
Remediation
Red Hat 3 advisories
- RHSA-2008:0508 Released 2008-06-25 · Red Hat rating Importantkernel security and bug fix update
- Red Hat Enterprise Linux AS version 4 kernel-2.6.9-67.0.20.EL, kernel-2.6.9-67.0.20.EL.ia64, kernel-2.6.9-67.0.20.EL.ppc64iseries +14
- Red Hat Enterprise Linux Desktop version 4 kernel-2.6.9-67.0.20.EL, kernel-devel-2.6.9-67.0.20.EL, kernel-doc-2.6.9-67.0.20.EL +8
- Red Hat Enterprise Linux ES version 4 kernel-2.6.9-67.0.20.EL, kernel-2.6.9-67.0.20.EL.ia64, kernel-devel-2.6.9-67.0.20.EL +12
- Red Hat Enterprise Linux WS version 4 kernel-2.6.9-67.0.20.EL, kernel-2.6.9-67.0.20.EL.ia64, kernel-devel-2.6.9-67.0.20.EL +12
- RHSA-2008:0233 Released 2008-05-07 · Red Hat rating Importantkernel security and bug fix update
- Red Hat Enterprise Linux (v. 5 server) kernel-2.6.18-53.1.19.el5, kernel-2.6.18-53.1.19.el5.ia64, kernel-PAE-2.6.18-53.1.19.el5 +18
- Red Hat Enterprise Linux Desktop (v. 5 client) kernel-2.6.18-53.1.19.el5, kernel-PAE-2.6.18-53.1.19.el5, kernel-PAE-devel-2.6.18-53.1.19.el5 +8
- RHSA-2008:0211 Released 2008-05-07 · Red Hat rating Importantkernel security and bug fix update
- Red Hat Desktop version 3 kernel-2.4.21-57.EL, kernel-2.4.21-57.EL.athlon, kernel-2.4.21-57.EL.ia32e +14
- Red Hat Enterprise Linux AS version 3 kernel-2.4.21-57.EL, kernel-2.4.21-57.EL.athlon, kernel-2.4.21-57.EL.ia32e +22
- Red Hat Enterprise Linux ES version 3 kernel-2.4.21-57.EL, kernel-2.4.21-57.EL.athlon, kernel-2.4.21-57.EL.ia32e +18
- Red Hat Enterprise Linux WS version 3 kernel-2.4.21-57.EL, kernel-2.4.21-57.EL.athlon, kernel-2.4.21-57.EL.ia32e +18
Vendor assessments
Red Hat
Red Hat rating: Low. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Desktop version 3 | Fixed | RHSA-2008:0211 |
| Red Hat Enterprise Linux (v. 5 server) | Fixed | RHSA-2008:0233 |
| Red Hat Enterprise Linux AS version 3 | Fixed | RHSA-2008:0211 |
| Red Hat Enterprise Linux AS version 4 | Fixed | RHSA-2008:0508 |
| Red Hat Enterprise Linux Desktop (v. 5 client) | Fixed | RHSA-2008:0233 |
| Red Hat Enterprise Linux Desktop version 4 | Fixed | RHSA-2008:0508 |
| Red Hat Enterprise Linux ES version 3 | Fixed | RHSA-2008:0211 |
| Red Hat Enterprise Linux ES version 4 | Fixed | RHSA-2008:0508 |
| Red Hat Enterprise Linux WS version 3 | Fixed | RHSA-2008:0211 |
| Red Hat Enterprise Linux WS version 4 | Fixed | RHSA-2008:0508 |
Timeline
- 2026-10-02 Threatist record created from CVE-2008-1367
- 2026-10-03 Alias added: GHSA-mh8h-6q9x-8j58
References
Advisory 6
Other 12
- [gcc-patches] 20080307 Re: [PATCH, i386]: Emit cld instruction when stringops are used
- [gcc-patches] 20080306 Re: [PATCH, i386]: Emit cld instruction when stringops are used
- [gcc-patches] 20080306 Re: [PATCH, i386]: Emit cld instruction when stringops are used
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=469058
- ADV-2008-2222
- [git-commits-head] 20080307 x86: clear DF before calling signal handler
- https://bugzilla.redhat.com/show_bug.cgi?id=437312
- http://lwn.net/Articles/272048/#Comments
- oval:org.mitre.oval:def:11108
- [Security-announce] 20080728 VMSA-2008-00011 Updated ESX service console packages for Samba and vmnix
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=e40cd10ccff3d9fbffd57b93780bee4b7b9bff51
- [gcc-patches] 20080306 [PATCH, i386]: Emit cld instruction when stringops are used
More GNU Gcc vulnerabilities
- TI-2023-03747 GCC's-fstack-protector fails to guard dynamically-sized local variables on AArch64 CVSS 3.1MEDIUM 4.8
- TI-2018-09258 stack_protect_prologue in cfgexpand.c and stack_protect_epilogue in function.c in GNU… CVSS 3.0HIGH 8.1
- TI-2019-11913 The POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize… CVSS 3.1HIGH 7.5
- TI-2021-15306 GCC c++filt v2.26 was discovered to contain a use-after-free vulnerability via the component cplus-dem.c. CVSS 3.1HIGH 7.8
- TI-2000-01207 The -ftrapv compiler option in gcc and g++ 3.3.3 and earlier does not handle all types of… CVSS 2.0HIGH 7.5
- TI-2002-02351 Integer overflow in the new[] operator in gcc before 4.8.0 allows attackers to have unspecified impacts. CVSS 3.1HIGH 7.8
Sources
- CVE-2008-1367 · CVE Program
- CVE-2008-1367 · NVD
- FIRST EPSS
- GHSA-mh8h-6q9x-8j58 · GitHub Advisory Database · CC BY 4.0
- CVE-2008-1367 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences