{"containers": {"cna": {"providerMetadata": {"dateUpdated": "2007-11-28T10:00:00", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "rejectedReasons": [{"lang": "en", "value": "Buffer overflow in the (1) sysfs_show_available_clocksources and (2) sysfs_show_current_clocksources functions in Linux kernel 2.6.23 and earlier might allow local users to cause a denial of service or execute arbitrary code via crafted clock source names. NOTE: follow-on analysis by Linux developers states that \"There is no way for unprivileged users (or really even the root user) to add new clocksources."}]}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-5908", "datePublished": "2007-11-09T19:00:00", "dateRejected": "2007-11-28T10:00:00", "dateReserved": "2007-11-09T00:00:00", "dateUpdated": "2007-11-28T10:00:00", "state": "REJECTED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "Rejected reason: Buffer overflow in the (1) sysfs_show_available_clocksources and (2) sysfs_show_current_clocksources functions in Linux kernel 2.6.23 and earlier might allow local users to cause a denial of service or execute arbitrary code via crafted clock source names. NOTE: follow-on analysis by Linux developers states that \"There is no way for unprivileged users (or really even the root user) to add new clocksources."}], "id": "CVE-2007-5908", "lastModified": "2023-11-07T02:01:24.240", "metrics": {}, "published": "2007-11-09T19:46:00.000", "references": [], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Rejected"}

{"bugzilla": {"description": "Buffer overflow in the (1) sysfs_show_available_clocksources and (2) sysfs_show_current_clocksources functions in Linux kernel", "id": "377591", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=377591"}, "csaw": false, "details": ["This CVE ID has been rejected or withdrawn by its CVE Numbering Authority for the following reason: Buffer overflow in the (1) sysfs_show_available_clocksources and (2) sysfs_show_current_clocksources functions in Linux kernel 2.6.23 and earlier might allow local users to cause a denial of service or execute arbitrary code via crafted clock source names. NOTE: follow-on analysis by Linux developers states that \"There is no way for unprivileged users (or really even the root user) to add new clocksources."], "name": "CVE-2007-5908", "public_date": "2007-11-08T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2007-5908\nhttps://nvd.nist.gov/vuln/detail/CVE-2007-5908"], "threat_severity": "Important"}