PT-2021-8069 · Linux +3 · Linux Kernel +3

🗓️ 13 Dec 2021 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 14 Views

Linux kernel NFSD out-of-bounds write in nfsd4_decode_bitmap4 from missing sanity checks; local access.

Reporter	Title	Published	Views	Family All 19092
BDU FSTEC	The vulnerability in the implementation of the SCTP protocol in the Linux operating system allows a hacker to cause a service failure.	15 May 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the can_rcv_filter() function in the net/can/af_can.c module of the Linux kernel’s operating system allows a hacker to cause a service failure.	15 May 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the _copy_from_user() function in the lib/usercopy.c module of the Linux kernel allows a hacker to disclose protected information.	15 May 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the rxrpc_unbundle_conn() function in Linux operating systems allows a hacker to enhance their privileges.	17 May 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the implementation of the NET/ROM network protocol of the Linux operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of data.	17 May 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ext4_xattr_set_entry() function in the fs/ext4/xattr.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of data.	17 May 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the x86_emulate_insn function in the arch/x86/kvm/emulate.c component of the Linux operating system’s kernel allows a hacker to cause a service failure.	17 May 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the kvm_steal_time_set_preempted() function in the arch/x86/kvm/x86.c module of the Linux operating system allows a hacker to gain access to protected information.	24 May 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the prepare_to_relocate() function in the fs/btrfs/relocation.c file of the btrfs file system in the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	16 Jun 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the Linux operating system’s IEEE 1394 (FireWire) driver core allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.	16 Jun 202300:00	–	bdu_fstec

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/vmwgfx_fd_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0847_dirtypipe.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/docker_cgroup_escape.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_nft_set_elem_init_privesc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2023_0386_overlayfs_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_1043_io_uring_priv_esc.rb
github	www.github.com/Arinerron/CVE-2022-0847-DirtyPipe-Exploit
github	www.github.com/AlexisAhmed/CVE-2022-0847-DirtyPipe-Exploits
github	www.github.com/tr3ee/CVE-2022-23222

14 Aug 2023 00:00Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.17.1 - 9.8

CVSS 29

CVSS 38.8

CVSS 48.6

EPSS0.88606

SSVC