CVE-2008-2358

CVE-2008-2358 describes an integer overflow vulnerability in the Datagram Congestion Control Protocol (DCCP) subsystem of the Linux kernel (versions 2.6.17 through 2.6.20 and 2.6.18). This flaw allows local users to achieve privilege escalation through a heap-based buffer overflow by providing an invalid feature length. With a CVSS score of 7.2, this vulnerability is considered highly severe, enabling complete compromise of confidentiality, integrity, and availability with low attack complexity. While no active exploitation, public exploit code, or significant community discussion has been observed, the potential for local privilege escalation remains a critical concern for affected systems.