NetSight
IP …
high7.8Public exploit code

CVE-2016-4997

The compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations in the netfilter subsystem in the Linux kernel before 4.6.3 allow local users …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations in the netfilter subsystem in the Linux kernel before 4.6.3 allow local users to gain privileges or cause a denial of service (memory corruption) by leveraging in-container root access to provide a crafted offset value that triggers an unintended decrement.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.17 before 3.2.80
from 3.3 before 3.10.103
from 3.11 before 3.12.62
from 3.13 before 3.14.73
from 3.15 before 3.16.37
from 3.17 before 3.18.37
CanonicalUbuntu Linux
Versions 12.04, 14.04, 15.10, 16.04
NovellSuse Linux Enterprise Software Development Kit
Version 12.0
NovellSuse Linux Enterprise Desktop
Version 12.0
NovellSuse Linux Enterprise Live Patching
Version 12.0
NovellSuse Linux Enterprise Module For Public Cloud
Version 12.0
NovellSuse Linux Enterprise Real Time Extension
Version 12.0
NovellSuse Linux Enterprise Server
Version 12.0
NovellSuse Linux Enterprise Workstation Extension
Version 12.0
OracleLinux
Version 7
DebianDebian Linux
Version 8.0

Weakness classification

CWE-264

References