Integer overflow in the do_replace function in netfilter for Linux before 2.6.16-rc3, when using "virtualization solutions" such as OpenVZ, allows local users with CAP_NET_ADMIN rights to cause a buffer overflow in the copy_from_user function.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-restricted-modules-commonUpgrade linux-image-powerpc64-smpUpgrade linux-amd64-k8Upgrade linux-image-2.6.12-10-686-smpUpgrade linux-source-2.6.15Upgrade linux-image-2.6.10-6-amd64-k8Upgrade linux-686Upgrade linux-image-2.6.10-6-power3-smpUpgrade linux-image-powerpc-smpUpgrade linux-image-2.6.15-25-amd64-serverUpgrade linux-image-2.6.12-10-powerpc-smpUpgrade linux-powerpc64-smpUpgrade linux-image-386Upgrade linux-source-2.6.10Upgrade linux-image-2.6.15-25-amd64-xeonUpgrade fglrx-controlUpgrade linux-restricted-modules-386Upgrade linux-amd64-serverUpgrade linux-image-2.6.12-10-amd64-k8-smpUpgrade linux-image-2.6.15-25-powerpc-smpUpgrade linux-restricted-modules-686Upgrade linux-k7Upgrade linux-image-2.6.10-6-powerpc-smpUpgrade linux-k7-smpUpgrade linux-686-smpUpgrade linux-restricted-modules-powerpc-smpUpgrade linux-image-2.6.10-6-amd64-k8-smpUpgrade linux-image-2.6.12-10-686Upgrade linux-image-2.6.10-6-k7-smpUpgrade linux-restricted-modules-amd64-k8Upgrade linux-power4-smpUpgrade linux-restricted-modules-amd64-xeonUpgrade linux-image-2.6.15-25-powerpcUpgrade linux-image-2.6.10-6-amd64-genericUpgrade linux-image-k7Upgrade linux-image-amd64-serverUpgrade linux-restricted-modules-2.6.15-25-powerpc-smpUpgrade linux-image-serverUpgrade avm-fritz-firmware-2.6.15-25Upgrade linux-restricted-modules-2.6.15-25-386Upgrade linux-power4Upgrade nvidia-glx-legacyUpgrade linux-powerpcUpgrade linux-power3Upgrade linux-image-2.6.10-6-686Upgrade linux-image-2.6.12-10-amd64-xeonUpgrade linux-image-2.6.12-10-k7-smpUpgrade nvidia-glx-legacy-devUpgrade linux-image-power3-smpUpgrade linux-image-2.6.10-6-k7Upgrade linux-image-server-bigironUpgrade linux-restricted-modules-2.6.15-25-amd64-genericUpgrade linux-image-2.6.12-10-powerpcUpgrade linux-power3-smpUpgrade linux-image-2.6.12-10-amd64-k8Upgrade avm-fritz-firmwareUpgrade linux-serverUpgrade linux-image-2.6.10-6-686-smpUpgrade linux-image-power3Upgrade linux-amd64-xeonUpgrade linux-restricted-modules-2.6.15-25-powerpcUpgrade linux-image-2.6.15-25-686Upgrade xorg-driver-fglrx-devUpgrade linux-restricted-modules-2.6.15-25-amd64-xeonUpgrade linux-image-2.6.15-25-386Upgrade linux-image-2.6.12-10-powerpc64-smpUpgrade nvidia-glxUpgrade linux-image-amd64-genericUpgrade linux-restricted-modules-k7Upgrade linux-image-powerpcUpgrade linux-image-2.6.10-6-amd64-xeonUpgrade linux-image-2.6.10-6-power3Upgrade linux-image-2.6.15-25-serverUpgrade linux-restricted-modules-powerpcUpgrade linux-image-686Upgrade linux-restricted-modules-2.6.15-25-amd64-k8Upgrade linux-image-2.6.12-10-386Upgrade linux-image-amd64-k8Upgrade fglrx-kernel-sourceUpgrade linux-source-2.6.12Upgrade linux-patch-ubuntu-2.6.10Upgrade linux-image-2.6.10-6-powerpcUpgrade linux-server-bigironUpgrade linux-amd64-k8-smpUpgrade linux-restricted-modules-2.6.15-25-k7Upgrade linux-image-power4-smpUpgrade linux-image-2.6.12-10-amd64-genericUpgrade linux-image-2.6.15-25-powerpc64-smpUpgrade linux-tree-2.6.10Upgrade linux-image-power4Upgrade linux-patch-ubuntu-2.6.12Upgrade linux-image-2.6.15-25-server-bigironUpgrade linux-image-amd64-xeonUpgrade avm-fritz-kernel-sourceUpgrade linux-restricted-modules-amd64-genericUpgrade linux-image-2.6.15-25-amd64-k8Upgrade linux-image-2.6.15-25-k7Upgrade xorg-driver-fglrxUpgrade linux-386Upgrade linux-image-2.6.10-6-power4Upgrade linux-image-2.6.15-25-amd64-genericUpgrade linux-image-2.6.10-6-386Upgrade linux-restricted-modules-2.6.15-25-686Upgrade linux-amd64-genericUpgrade linux-image-2.6.10-6-power4-smpUpgrade linux-image-2.6.12-10-k7Upgrade linux-powerpc-smpUpgrade nvidia-glx-devUpgrade linux-tree-2.6.12 | Nov 8, 2024 | Mar 22, 2006 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub