Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-26668
HistoryApr 02, 2024 - 6:43 a.m.

CVE-2024-26668 netfilter: nft_limit: reject configurations that cause integer overflow

2024-04-0206:43:29
Linux
github.com
1
linux kernel
netfilter
nft_limit
integer overflow
reject configurations

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft_limit: reject configurations that cause integer overflow

Reject bogus configs where internal token counter wraps around.
This only occurs with very very large requests, such as 17gbyte/s.

Its better to reject this rather than having incorrect ratelimit.

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial