Integer overflow

2006-03-2220:06:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

39.4%

JSON

Integer overflow in the do_replace function in netfilter for Linux before 2.6.16-rc3, when using “virtualization solutions” such as OpenVZ, allows local users with CAP_NET_ADMIN rights to cause a buffer overflow in the copy_from_user function.

CPENameOperatorVersion
linux_kerneleq2.6.11 rc3
linux_kerneleq2.6.11
linux_kerneleq2.6.12 rc1
linux_kerneleq2.6.12 rc4
linux_kerneleq2.6.14 rc2
linux_kerneleq2.6.5
linux_kerneleq2.6.15.3
linux_kerneleq2.6.1
linux_kerneleq2.6.16 rc1
linux_kerneleq2.6.13

Name	Operator	Version
linux_kernel	eq	2.6.11 rc3
linux_kernel	eq	2.6.11
linux_kernel	eq	2.6.12 rc1
linux_kernel	eq	2.6.12 rc4
linux_kernel	eq	2.6.14 rc2
linux_kernel	eq	2.6.5
linux_kernel	eq	2.6.15.3
linux_kernel	eq	2.6.1
linux_kernel	eq	2.6.16 rc1
linux_kernel	eq	2.6.13