CVE-2008-1338: Perforce Server

High severity, CVSS 7.8. EPSS: 2.1% chance of exploitation in the next 30 days.

The Perforce service (p4s.exe) in Perforce Server 2007.3/143793 and earlier allows remote attackers to cause a denial of service (daemon crash) via a server-DiffFile command with an integer value within a certain range, which causes a loop until all memory is exhausted.

Affected products

• Perforce Perforce Server: up to and including 2007.3_143793

Published 2008-03-14. Last modified 2026-06-16.