NetSight
IP …
high7.8Public exploit code

CVE-2016-3135

Integer overflow in the xt_alloc_table_info function in net/netfilter/x_tables.c in the Linux kernel through 4.5.2 on 32-bit platforms allows local users to ga…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Integer overflow in the xt_alloc_table_info function in net/netfilter/x_tables.c in the Linux kernel through 4.5.2 on 32-bit platforms allows local users to gain privileges or cause a denial of service (heap memory corruption) via an IPT_SO_SET_REPLACE setsockopt call.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.2 before 4.4.21
from 4.5 before 4.6
CanonicalUbuntu Linux
Versions 14.04, 15.10, 16.04

Weakness classification

CWE-189

References