A buffer overflow in iptables-restore in netfilter iptables 1.8.2 allows an attacker to (at least) crash the program or potentially gain code execution via a specially crafted iptables-save file. This is related to add_param_to_argv in xshared.c.
CVSS Details
- CVSS 3.1 Base Score: 4.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade iptables | Jul 30, 2024 | Jul 12, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade iptablesUpgrade iptables-servicesUpgrade iptables-devel | Sep 28, 2020 | Jul 12, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade iptables-develUpgrade iptables-servicesUpgrade iptables | Jun 3, 2020 | Jul 12, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade iptables-develUpgrade iptablesUpgrade iptables-utilsUpgrade iptables-servicesUpgrade iptables-libs | Apr 21, 2020 | Jul 12, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 12, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub