PT-2021-7066 · Linux +8 · Linux Kernel +8

🗓️ 26 Aug 2021 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 34 Views

Flaw in ICMP error handling lets off-path attacker scan UDP ports and bypass port randomization, affecting confidentiality.

Reporter	Title	Published	Views	Family All 27054
BDU FSTEC	(Vulnerability) The vulnerability of the `show_transport_handle` function in Linux kernel allows a hacker to disclose sensitive information or cause service failures.	15 Mar 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SCTP socket buffer in Linux kernel allows a hacker to induce a service failure.	21 Mar 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the GPU Nouveau driver for the Linux operating system, which allows a hacker to trigger a service failure	30 Mar 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the implementation of the show_transport_handle() function in Linux operating systems allows a malicious actor to gain unauthorized access to protected information.	30 Mar 202100:00	–	bdu_fstec
BDU FSTEC	(Vulnerability) The vulnerability of the iSCSI subsystem in Linux operating systems allows a hacker to cause a service failure or gain increased privileges.	30 Mar 202100:00	–	bdu_fstec
BDU FSTEC	(Vulnerability) The vulnerability of the iSCSI subsystem in Linux operating systems, which allows a perpetrator to compromise the confidentiality, integrity, and accessibility of data.	30 Mar 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the unix_stream_recvmsg function in Linux operating system kernels, which allows a hacker to cause a service failure	30 Mar 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the l2tp_session_delete function (l2tp_core.c) in the Android operating system’s kernel allows a hacker to increase their privileges.	1 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Freescale Gianfar Ethernet kernel for Linux operating systems allows a hacker to cause a service failure.	6 Apr 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the implementation of the usbip_sockfd_store function in Linux kernel allows a hacker to induce a service failure.	6 Apr 202100:00	–	bdu_fstec

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/vmwgfx_fd_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0847_dirtypipe.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/Arinerron/CVE-2022-0847-DirtyPipe-Exploit
github	www.github.com/AlexisAhmed/CVE-2022-0847-DirtyPipe-Exploits
github	www.github.com/tr3ee/CVE-2022-23222

09 Nov 2023 00:00Current

7.8High risk

Vulners AI Score7.8

CVSS 28.8 - 9

CVSS 36.7 - 8.8

CVSS 3.19.1 - 9.8

CVSS 48.7

EPSS0.92621

SSVC