Multiple stack-based buffer overflows in net/netfilter/ipvs/ip_vs_ctl.c in the Linux kernel before 2.6.33, when CONFIG_IP_VS is used, allow local users to gain privileges by leveraging the CAP_NET_ADMIN capability for (1) a getsockopt system call, related to the do_ip_vs_get_ctl function, or (2) a setsockopt system call, related to the do_ip_vs_set_ctl function.
CVSS Details
- CVSS 3.1 Base Score: 7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-xenpaeUpgrade xen-kmp-traceUpgrade hyper-v-kmp-paeUpgrade ext4dev-kmp-defaultUpgrade kernel-ec2-baseUpgrade btrfs-kmp-defaultUpgrade kernel-smpUpgrade ext4dev-kmp-traceUpgrade kernel-default-baseUpgrade xen-kmp-defaultUpgrade kernel-kdumpUpgrade kernel-defaultUpgrade hyper-v-kmp-traceUpgrade xen-kmp-paeUpgrade kernel-trace-baseUpgrade ext4dev-kmp-xenUpgrade kernel-vmipaeUpgrade kernel-pae-develUpgrade kernel-symsUpgrade kernel-trace-develUpgrade kernel-default-manUpgrade ext4dev-kmp-paeUpgrade btrfs-kmp-paeUpgrade kernel-sourceUpgrade kernel-paeUpgrade kernel-xenUpgrade kernel-debugUpgrade hyper-v-kmp-defaultUpgrade kernel-default-develUpgrade btrfs-kmp-xenUpgrade kernel-vmiUpgrade kernel-bigsmpUpgrade kernel-ec2Upgrade kernel-ec2-develUpgrade kernel-traceUpgrade kernel-xen-develUpgrade kernel-xen-baseUpgrade kernel-pae-baseUpgrade kernel-kdumppae | Feb 17, 2015 | Nov 20, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.32-55-powerpc64-smpUpgrade linux-image-2.6.32-55-powerpc-smpUpgrade linux-image-2.6.32-360-ec2Upgrade linux-image-2.6.32-55-lpiaUpgrade linux-image-2.6.32-55-sparc64Upgrade linux-image-2.6.32-55-versatileUpgrade linux-image-2.6.32-55-ia64Upgrade linux-image-2.6.32-55-sparc64-smpUpgrade linux-image-2.6.32-55-386Upgrade linux-image-2.6.32-55-generic-paeUpgrade linux-image-2.6.32-55-virtualUpgrade linux-image-2.6.32-55-preemptUpgrade linux-image-2.6.32-55-genericUpgrade linux-image-2.6.32-55-powerpcUpgrade linux-image-2.6.32-55-server | Nov 8, 2024 | Nov 20, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub