Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2008-5702

18
FAUCET Score

CVE-2008-5702 describes a buffer underflow vulnerability in the ibwdt_ioctl function within the Linux kernel (before version 2.6.28-rc1), specifically affecting the ib700wdt.c driver. This flaw could allow local users to achieve an unknown but potentially significant impact through a crafted WDIOC_SETTIMEOUT IOCTL call to /dev/watchdog. With a CVSS score of 7.2, it is considered high severity due to local access, low attack complexity, and complete confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant media coverage, though it has received minimal community discussion.

Impacted Technologies

VendorProductVersion(s)CPE
<= 2.6.28CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
2.2.27CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:2.2.27:*:*:*:*:*:*:*
2.4.36CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:2.4.36:*:*:*:*:*:*:*
2.4.36.1CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:2.4.36.1:*:*:*:*:*:*:*
2.4.36.2CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:2.4.36.2:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

7.2HIGH

AV:L/AC:L/Au:N/C:C/I:C/A:C

Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Exploitability Score
3.9
Impact Score
10.0
CvssVersion
2.0

Exploit Intelligence

EPSS Score
0.49%
Probability of exploitation in next 30 days
EPSS Percentile
39.6%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0049 is in the 60th percentile among its peer group of 3,241 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.5 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (1)

redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 4Fixed in: kernel-0:2.6.9-78.0.13.EL
View patch

Vendor Advisories (1)

redhatCVE-2008-5702Low

kernel: watchdog: ib700wdt.c - buffer_underflow bug

Aug 21, 2008

References

bugzilla.kernel.org / show_bug.cgi
Exploit
git.kernel.org
lists.opensuse.org / opensuse-security-announce/2009-02/msg00003.html
lists.opensuse.org / opensuse-security-announce/2009-06/msg00000.html
lkml.org / lkml/2008/10/5/173
openwall.com / lists/oss-security/2008/12/10/2
openwall.com / lists/oss-security/2008/12/17/20
openwall.com / lists/oss-security/2008/12/17/6
openwall.com / lists/oss-security/2008/12/17/9
secunia.com / advisories/33556
secunia.com / advisories/33706
secunia.com / advisories/33756
secunia.com / advisories/34981
secunia.com / advisories/35011
secunia.com / advisories/35390
exchange.xforce.ibmcloud.com / vulnerabilities/47667
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11344
usn.ubuntu.com / 714-1
debian.org / security/2009/dsa-1787
debian.org / security/2009/dsa-1794
kernel.org / pub/linux/kernel/v2.6/testing/ChangeLog-2.6.28-rc1
redhat.com / support/errata/RHSA-2009-0014.html
ubuntu.com / usn/usn-715-1