CVE-2019-20795

CVE-2019-20795 affects iproute2 up to version 5.0.x, with a use-after-free in get_netnsid_from_name() (ip/ipnetns.c). The issue is triggered in the net namespace handling and is the likely root cause of a local-use-after-free condition. The CVE describes the vulnerability as a use-after-free in g...

CVE-2012-1088

CVE-2012-1088 affects iproute2 prior to 3.3.0. A local user can overwrite arbitrary files via a symlink attack on a temporary file used by either configure or the examples/dhcp-client-script. Root cause: insecure temporary file handling in iproute2. Impact: local privilege-concerned impact (file ...