EUVD-2019-11332

Malware in sbrugna...

iproute2 resource management error vulnerability

iproute2 is a utility program for controlling and monitoring routes, network interfaces, tunnels, etc. in the Linux kernel. A resource management error vulnerability exists in the 'getnetnsidfromname' function of the ip/ipnetns.c file in iproute2 versions prior to 5.1.0. The vulnerability arises...

CVE-2019-20795

iproute2 before 5.1.0 has a use-after-free in getnetnsidfromname in ip/ipnetns.c. NOTE: security relevance may be limited to certain uses of setuid that, although not a default, are sometimes a configuration option offered to end users. Even when setuid is used, other factors such as C library...

Mandrake Linux Security Advisory : iproute2 (MDKSA-2004:148)

Herbert Xu discovered that iproute can accept spoofed messages sent via the kernel netlink interface by other users on the local machine. This could lead to a local Denial of Service attack. The updated packages have been patched to prevent this problem. %NASLMINLEVEL 70300 C Tenable Network...