Code injection

2020-11-0221:15:00

PRIOn knowledge base

www.prio-n.com

7.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

An issue was discovered in ProlinOS through 2.4.161.8859R. An attacker with local code execution privileges as a normal user (MAINAPP) can escalate to root privileges by exploiting the setuid installation of the xtables-multi binary and leveraging the ip6tables --modprobe switch.

CPENameOperatorVersion
prolinoseq<= 2.4.161.8859r

CPE	Name	Operator	Version
	prolinos	eq	<= 2.4.161.8859r

References

git.lsd.cat/g/pax-pwn