high7.8Public exploit code

CVE-2019-9162

In the Linux kernel before 4.20.12, net/ipv4/netfilter/nf_nat_snmp_basic_main.c in the SNMP NAT module has insufficient ASN.1 length checks (aka an array index…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Linux < 4.14.103 / < 4.19.25 - Out-of-Bounds Read and Write in SNMP NAT Module2019-03-01 · dos · linux · Verified

Impact

In the Linux kernel before 4.20.12, net/ipv4/netfilter/nf_nat_snmp_basic_main.c in the SNMP NAT module has insufficient ASN.1 length checks (aka an array index error), making out-of-bounds read and write operations possible, leading to an OOPS or local privilege escalation. This affects snmp_version and snmp_helper.

Affected products

Vendor	Product	Affected versions
Linux	Linux Kernel	from 4.19 before 4.19.25 from 4.20 before 4.20.12
Netapp	Hci Management Node	All versions
Netapp	Snapprotect	All versions
Netapp	Solidfire	All versions
Canonical	Ubuntu Linux	Versions 18.04, 18.10
Netapp	Cn1610 Firmware	All versions

Weakness classification

CWE-787

Public exploit code

Impact

Affected products

Weakness classification

References