CVE-2008-2378: Hf

High severity, CVSS 7.2. EPSS: 0.3% chance of exploitation in the next 30 days.

Untrusted search path vulnerability in hfkernel in hf 0.7.3 and 0.8 allows local users to gain privileges via a Trojan horse killall program in a directory in the PATH, related to improper handling of the -k option.

Affected products

• Hf Hf: version 0.7.3 only; version 0.8 only

Published 2008-11-26. Last modified 2026-06-16.