net/bridge/netfilter/ebtables.c in the ebtables module in the netfilter framework in the Linux kernel before 2.6.33-rc4 does not require the CAP_NET_ADMIN capability for setting or modifying rules, which allows local users to bypass intended access restrictions and configure arbitrary network-traffic filtering via a modified ebtables application.
CVSS Details
- CVSS 3.1 Base Score: 7.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-PAE-develUpgrade kernel-largesmp-develUpgrade kernel-develUpgrade kernel-xenUUpgrade kernel-smpUpgrade kernel-debug-develUpgrade kernel-largesmpUpgrade kernel-xen-develUpgrade kernel-PAEUpgrade kernel-xenU-develUpgrade kernel-smp-develUpgrade kernelUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-xenUpgrade kernel-doc | Dec 1, 2016 | Jan 19, 2010 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jul 23, 2015 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jan 19, 2010 |
| Suse | — | Upgrade kernel-default-manUpgrade kernel-paeUpgrade ext4dev-kmp-vmiUpgrade ext4dev-kmp-paeUpgrade kernel-vmiUpgrade kernel-xenUpgrade kernel-sourceUpgrade ext4dev-kmp-xenUpgrade ext4dev-kmp-defaultUpgrade ext4dev-kmp-ppc64Upgrade kernel-ppc64Upgrade kernel-default-baseUpgrade kernel-pae-baseUpgrade kernel-symsUpgrade kernel-defaultUpgrade kernel-ppc64-baseUpgrade iscsitarget-kmp-defaultUpgrade oracleasm-kmp-defaultUpgrade kernel-vmi-baseUpgrade kernel-kdumpUpgrade kernel-xen-base | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.24-27-powerpc64-smpUpgrade linux-image-2.6.28-18-versatileUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.27-17-serverUpgrade linux-image-2.6.24-27-genericUpgrade linux-image-2.6.24-27-386Upgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.28-18-imx51Upgrade linux-image-2.6.31-19-386Upgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.24-27-openvzUpgrade linux-image-2.6.24-27-sparc64-smpUpgrade linux-image-2.6.24-27-lpiaUpgrade linux-image-2.6.24-27-mckinleyUpgrade linux-image-2.6.31-304-ec2Upgrade linux-image-2.6.31-108-imx51Upgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.31-211-doveUpgrade linux-image-2.6.24-27-xenUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.28-18-lpiaUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.24-27-itaniumUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.24-27-virtualUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.31-19-powerpc64-smpUpgrade linux-image-2.6.28-18-serverUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.31-211-dove-z0Upgrade linux-image-2.6.31-19-lpiaUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.24-27-hppa64Upgrade linux-image-2.6.31-19-sparc64-smpUpgrade linux-image-2.6.31-19-powerpcUpgrade linux-image-2.6.31-19-genericUpgrade linux-image-2.6.28-18-ixp4xxUpgrade linux-image-2.6.31-19-serverUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.31-19-ia64Upgrade linux-image-2.6.27-17-virtualUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.24-27-rtUpgrade linux-image-2.6.31-19-powerpc-smpUpgrade linux-image-2.6.24-27-sparc64Upgrade linux-image-2.6.24-27-serverUpgrade linux-image-2.6.27-17-genericUpgrade linux-image-2.6.31-19-generic-paeUpgrade linux-image-2.6.28-18-genericUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.28-18-iop32xUpgrade linux-image-2.6.24-27-powerpc-smpUpgrade linux-image-2.6.28-18-virtualUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.24-27-hppa32Upgrade linux-image-2.6.31-19-virtualUpgrade linux-image-2.6.24-27-powerpcUpgrade linux-image-2.6.24-27-lpiacompatUpgrade linux-image-2.6.31-19-sparc64 | Nov 8, 2024 | Jan 19, 2010 |
| Vmsa 2011 0003 | — | Upgrade VMware ESX 4.1 to build number 348481Upgrade VMware ESX 4.0 to build number 360236 | Feb 16, 2011 | Jan 19, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub