CVE-2016-4997
CVE-2016-4997
The compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations in the netfilter subsystem in the Linux kernel before 4.6.3 allow local users to gain privileges or cause a denial of service (memory corruption) by leveraging in-container root access to provide a crafted offset value that triggers an unintended decrement.
Affected products
n/a · n/apublic PoCs found — 4
cve_referencewww.exploit-db.com/exploits/40435/unverifiedcve_referencewww.exploit-db.com/exploits/40489/unverifiedexploitdbwww.exploit-db.com/exploits/40489unverifiedexploitdbwww.exploit-db.com/exploits/40435unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →References
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ce683e5f9d045e5d67d1312a42b359cb2ab2a13chttp://lists.opensuse.org/opensuse-security-announce/2016-06/msg00060.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-06/msg00061.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-08/msg00027.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-08/msg00048.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-08/msg00050.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-08/msg00051.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-08/msg00052.htmlhttp://lists.opensuse.org/opensuse-security-announce/2016-08/msg00053.html