EUVD-2020-20536

Malware in sbrugna...

Vulnerabilities of the xtables-nft-multi and xtables-legacy-multi tools in the iptables package of the EMIAS OS operating system, which allow a hacker to trigger a memory leak.

The vulnerabilities of the xtables-nft-multi and xtables-legacy-multi tools in the iptables package of the EMIAS OS operating system are related to memory release errors. Exploiting these vulnerabilities can allow an attacker to cause service failures or other adverse effects...

PT-2022-6181 · Iptables · Iptables

Name of the Vulnerable Software and Affected Versions: iptables affected versions not specified Description: The issue is related to memory deallocation errors in the xtables-nft-multi and xtables-legacy-multi utilities of the iptables package in the EMIAS OS operating system. Exploitation of thi...

CVE-2020-28046

An issue was discovered in ProlinOS through 2.4.161.8859R. An attacker with local code execution privileges as a normal user MAINAPP can escalate to root privileges by exploiting the setuid installation of the xtables-multi binary and leveraging the ip6tables --modprobe switch...

CVE-2020-28046

An issue was discovered in ProlinOS through 2.4.161.8859R. An attacker with local code execution privileges as a normal user MAINAPP can escalate to root privileges by exploiting the setuid installation of the xtables-multi binary and leveraging the ip6tables --modprobe switch...

Code injection

An issue was discovered in ProlinOS through 2.4.161.8859R. An attacker with local code execution privileges as a normal user MAINAPP can escalate to root privileges by exploiting the setuid installation of the xtables-multi binary and leveraging the ip6tables --modprobe switch...

CVE-2020-28046

An issue was discovered in ProlinOS through 2.4.161.8859R. An attacker with local code execution privileges as a normal user MAINAPP can escalate to root privileges by exploiting the setuid installation of the xtables-multi binary and leveraging the ip6tables --modprobe switch...

CVE-2020-28046

ProlinOS up to version 2.4.161.8859R is affected. A local attacker with normal user (MAINAPP) privileges can escalate to root by abusing a setuid xtables-multi binary and using the ip6tables --modprobe switch. The connected records confirm the root-cause is the setuid installation and ip6tables m...