nf-web.de Improper Access Control vulnerability OBB-2412086

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2022-7479

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.17.1 Description A critical vulnerability in the Linux kernel has been resolved, affecting versions prior to 5.17.1. The vulnerability is related to a use-after-free issue in the nf register net hook function,...

CVE-2022-25636

net/netfilter/nfdupnetdev.c in the Linux kernel 5.4 through 5.6.10 allows local users to gain privileges because of a heap out-of-bounds write. This is related to nftablesoffload...

UBUNTU-CVE-2022-25636

net/netfilter/nfdupnetdev.c in the Linux kernel 5.4 through 5.6.10 allows local users to gain privileges because of a heap out-of-bounds write. This is related to nftablesoffload...

PT-2022-7494

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.16.0-rc5-syzkaller Description The issue is related to the netfilter component of the Linux kernel, specifically with the nf tables subsystem. It involves a use-after-free error in the nf hook entries grow...

nf_tables_newset in net/netfilter/nf_tables_api.c in the Linux kernel before 5.12.13 allows local users to cause a denial of service (NULL pointer dereference and general protection fault) because of the missing initialization for nft_set_elem_expr_alloc. A local user can set a netfilter table expression in their own namespace.

...

CVE-2021-46283

nftablesnewset in net/netfilter/nftablesapi.c in the Linux kernel before 5.12.13 allows local users to cause a denial of service NULL pointer dereference and general protection fault because of the missing initialization for nftsetelemexpralloc. A local user can set a netfilter table expression i...

UBUNTU-CVE-2021-46283

nftablesnewset in net/netfilter/nftablesapi.c in the Linux kernel before 5.12.13 allows local users to cause a denial of service NULL pointer dereference and general protection fault because of the missing initialization for nftsetelemexpralloc. A local user can set a netfilter table expression i...

PT-2021-30357

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.15 Description The issue concerns the netfilter nf tables component, specifically the handling of netdev events during netns removal. The actual impact and potential for attack have not been fully determine...

PT-2021-26362

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.15 Description: The issue concerns netfilter and nf tables, where netdev events generated on netns removal are not properly handled. The actual impact and attack plausibility have not yet been proven...

PT-2021-30099

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.71 Description The issue is related to oversized kvmalloc calls in the nf tables component of netfilter. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-26104

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.71 Description The issue is related to oversized kvmalloc calls in the nf tables component of netfilter. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-30171

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.10 Description The issue concerns oversized kvmalloc calls in the nf tables component of netfilter. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-26176

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.10 Description: The issue is related to oversized kvmalloc calls in the nf tables component of netfilter. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kern...

PT-2021-26194

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.10 Description: The issue concerns the nf tables component of netfilter in the Linux Kernel. It involves unlinking a table before deleting it. The actual impact and potential for attack have not been prove...

PT-2021-30189

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.10 Description The issue concerns the netfilter nf tables component. It involves unlinking a table before deleting it. The actual impact and attack plausibility have not yet been proven. Recommendations For...

nf-lechhausen.de Cross Site Scripting vulnerability OBB-2166657

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2024-11446

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the netfilter component of the Linux kernel, specifically with the nf tables subsystem. When netns device exit hooks create an UNREGISTER event, the .pre exit hoo...

Linux kernel netfilter conntrack Standalone Disclosure

The vulnerabilities of the parameters NFSYSCTLCTMAX, NFSYSCTLCTEXPECTMAX, and NFSYSCTLCTBUCKETS in the Linux kernel’s net/netfilter/nfconntrackstandalone.c component are related to the disclosure of information through non-compliance. Exploiting these vulnerabilities can allow attackers to disclo...

PT-2024-11390

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue has been identified in the Linux kernel's netfilter nf tables component. The problem arises because all get operations are lockless, allowing a parallel GET reques...