CVE-2008-3281

Key facts

CVSS score

6.5 (v3.1)

Severity

MEDIUM

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness (CWE)

CWE-776

EPSS score

2.5% (84th percentile)

In CISA KEV

No

In EU EUVD

Yes (EUVD-2008-3269)

Published

August 27, 2008

NVD last modified

June 16, 2026

Status

Modified

Affected products

• apple / iphone os
• apple / safari
• canonical / ubuntu linux
• canonical / ubuntu linux
• canonical / ubuntu linux
• canonical / ubuntu linux
• debian / debian linux
• fedoraproject / fedora
• redhat / enterprise linux desktop
• redhat / enterprise linux desktop
• redhat / enterprise linux desktop
• redhat / enterprise linux eus
• redhat / enterprise linux eus
• redhat / enterprise linux server
• redhat / enterprise linux server
• redhat / enterprise linux server
• redhat / enterprise linux server
• redhat / enterprise linux workstation
• redhat / enterprise linux workstation
• redhat / enterprise linux workstation
• redhat / enterprise linux workstation
• vmware / esx
• vmware / esx
• vmware / esx
• vmware / esx
• xmlsoft / libxml2

Certified products that may be affected

2 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

• Red Hat Enterprise Linux 5 OpenSSH-Server Cryptographic Module - Red Hat®, Inc. - FIPS 140 1384 - historical
• Red Hat Enterprise Linux AS, Version 4 Update 4 - Red Hat, Inc. - Common Criteria CCEVS-VR-0035-2006 - archived

References

• http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html(Mailing List)
• http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html(Broken Link, Mailing List)
• http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html(Mailing List)
• http://lists.vmware.com/pipermail/security-announce/2008/000039.html(Broken Link)
• http://mail.gnome.org/archives/xml/2008-August/msg00034.html(Mailing List, Patch)
• http://secunia.com/advisories/31558(Broken Link)
• http://secunia.com/advisories/31566(Broken Link)
• http://secunia.com/advisories/31590(Broken Link)
• http://secunia.com/advisories/31728(Broken Link)
• http://secunia.com/advisories/31748(Broken Link)
• http://secunia.com/advisories/31855(Broken Link)
• http://secunia.com/advisories/31982(Broken Link)
• http://secunia.com/advisories/32488(Broken Link)
• http://secunia.com/advisories/32807(Broken Link)
• http://secunia.com/advisories/32974(Broken Link)
• http://secunia.com/advisories/35379(Broken Link)
• http://security.gentoo.org/glsa/glsa-200812-06.xml(Third Party Advisory)
• http://support.apple.com/kb/HT3613(Third Party Advisory)
• http://support.apple.com/kb/HT3639(Third Party Advisory)
• http://svn.gnome.org/viewvc/libxml2?view=revision&revision=3772(Broken Link)
• http://wiki.rpath.com/Advisories:rPSA-2008-0325(Broken Link)
• http://www.debian.org/security/2008/dsa-1631(Mailing List, Third Party Advisory)
• http://www.mandriva.com/security/advisories?name=MDVSA-2008:180(Broken Link)
• http://www.mandriva.com/security/advisories?name=MDVSA-2008:192(Broken Link)
• http://www.securityfocus.com/archive/1/497962/100/0/threaded(Broken Link, Third Party Advisory, VDB Entry)
• http://www.securityfocus.com/bid/30783(Broken Link, Patch, Third Party Advisory, VDB Entry)
• http://www.securitytracker.com/id?1020728(Broken Link, Third Party Advisory, VDB Entry)
• http://www.ubuntu.com/usn/usn-640-1(Third Party Advisory)
• http://www.vmware.com/security/advisories/VMSA-2008-0017.html(Third Party Advisory)
• http://www.vupen.com/english/advisories/2008/2419(Broken Link)
• http://www.vupen.com/english/advisories/2008/2843(Broken Link)
• http://www.vupen.com/english/advisories/2008/2971(Broken Link)
• http://www.vupen.com/english/advisories/2009/1522(Broken Link)
• http://www.vupen.com/english/advisories/2009/1621(Broken Link)
• http://xmlsoft.org/news.html(Release Notes)
• https://bugzilla.redhat.com/show_bug.cgi?id=458086(Issue Tracking)
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6496(Broken Link)
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9812(Broken Link)
• https://rhn.redhat.com/errata/RHSA-2008-0836.html(Third Party Advisory)
• https://usn.ubuntu.com/644-1/(Broken Link)