CVE-2016-3135

HIGH

Linux Kernel < 4.4.21 - Numeric Error

Title source: rule

Description

Integer overflow in the xt_alloc_table_info function in net/netfilter/x_tables.c in the Linux kernel through 4.5.2 on 32-bit platforms allows local users to gain privileges or cause a denial of service (heap memory corruption) via an IPT_SO_SET_REPLACE setsockopt call.

Exploits (1)

exploitdb WORKING POC

doslinux

https://www.exploit-db.com/exploits/39545

View Code ZIP pw:eip

References (12)

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/84305

[Vendor Advisory] http://www.ubuntu.com/usn/USN-2930-1

[Vendor Advisory] http://www.ubuntu.com/usn/USN-2930-2

[Vendor Advisory] http://www.ubuntu.com/usn/USN-2930-3

[Vendor Advisory] http://www.ubuntu.com/usn/USN-3054-1

[Vendor Advisory] http://www.ubuntu.com/usn/USN-3055-1

[Vendor Advisory] http://www.ubuntu.com/usn/USN-3056-1

[Vendor Advisory] http://www.ubuntu.com/usn/USN-3057-1

[Issue Tracking] https://bugzilla.redhat.com/show_bug.cgi?id=1317386

[Patch] http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=d157bd761585605b7882935ffb86286919f62ea1

[Patch] https://github.com/torvalds/linux/commit/d157bd761585605b7882935ffb86286919f62ea1

[Issue Tracking] https://code.google.com/p/google-security-research/issues/detail?id=758

Scores

CVSS v3 7.8

EPSS 0.0020

EPSS Percentile 42.2%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-189

Status published

Products (4)

canonical/ubuntu_linux 14.04

canonical/ubuntu_linux 15.10

canonical/ubuntu_linux 16.04

linux/linux_kernel 4.2 - 4.4.21

Published Apr 27, 2016

Tracked Since Feb 18, 2026