Lucene search

[email protected]CVE-2016-4998

HistoryJul 03, 2016 - 9:59 p.m.

CVE-2016-4998

2016-07-0321:59:00

CWE-119

[email protected]

web.nvd.nist.gov

131

cve-2016-4998

netfilter

linux kernel

ipt_so_set_replace

denial of service

sensitive information

nvd

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

6.9 Medium

AI Score

Confidence

High

5.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:P/I:N/A:C

0.0004 Low

EPSS

Percentile

9.3%

JSON

The IPT_SO_SET_REPLACE setsockopt implementation in the netfilter subsystem in the Linux kernel before 4.6 allows local users to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from kernel heap memory by leveraging in-container root access to provide a crafted offset value that leads to crossing a ruleset blob boundary.

CPENameOperatorVersion
linux:linux_kernellinux linux kernelle4.5.5
oracle:linuxoracle linuxeq7
canonical:ubuntu_linuxcanonical ubuntu linuxeq12.04
canonical:ubuntu_linuxcanonical ubuntu linuxeq16.04
canonical:ubuntu_linuxcanonical ubuntu linuxeq15.10
canonical:ubuntu_linuxcanonical ubuntu linuxeq14.04

CPE	Name	Operator	Version
linux:linux_kernel	linux linux kernel	le	4.5.5
oracle:linux	oracle linux	eq	7
canonical:ubuntu_linux	canonical ubuntu linux	eq	12.04
canonical:ubuntu_linux	canonical ubuntu linux	eq	16.04
canonical:ubuntu_linux	canonical ubuntu linux	eq	15.10
canonical:ubuntu_linux	canonical ubuntu linux	eq	14.04