vulnerability
CentOS Linux: CVE-2016-4998: Important: kernel security and bug fix update (CESA-2017:0036)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 6 | (AV:L/AC:L/Au:N/C:P/I:N/A:C) | 2016-07-03 | 2016-09-20 | 2023-05-25 |
Severity
6
CVSS
(AV:L/AC:L/Au:N/C:P/I:N/A:C)
Published
2016-07-03
Added
2016-09-20
Modified
2023-05-25
Description
The IPT_SO_SET_REPLACE setsockopt implementation in the netfilter subsystem in the Linux kernel before 4.6 allows local users to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from kernel heap memory by leveraging in-container root access to provide a crafted offset value that leads to crossing a ruleset blob boundary.
Solution
centos-upgrade-kernel
References
- BID-91451
- DEBIAN-DSA-3607
- NVD-CVE-2016-4998
- REDHAT-RHSA-2016:1847
- REDHAT-RHSA-2016:1875
- REDHAT-RHSA-2016:1883
- REDHAT-RHSA-2017:0036
- UBUNTU-USN-3016-1
- UBUNTU-USN-3016-2
- UBUNTU-USN-3016-3
- UBUNTU-USN-3016-4
- UBUNTU-USN-3017-1
- UBUNTU-USN-3017-2
- UBUNTU-USN-3017-3
- UBUNTU-USN-3018-1
- UBUNTU-USN-3018-2
- UBUNTU-USN-3019-1
- UBUNTU-USN-3020-1
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.