PT-2006-1129

CVE-2006-0038

·

Publicado

2006-03-22

·

Atualizado

2023-02-13

Descrição por

CVSS 2.0
6.9
Média
MétricasAV:L/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: Linux versions prior to 2.6.16-rc3
Description: The issue is related to an integer overflow in the do replace function in netfilter for Linux. This can be exploited by local users with CAP NET ADMIN rights to cause a buffer overflow in the copy from user function, particularly when using virtualization solutions such as OpenVZ.
Recommendations: For Linux versions prior to 2.6.16-rc3, update to version 2.6.16-rc3 or later to resolve the issue. As a temporary workaround, consider restricting the use of CAP NET ADMIN rights to minimize the risk of exploitation.
Explorabilidade
Correção
Fornecedores
Produtos afetados
Enumeração de fraquezas
Identificadores relacionados
DSA-1097-1
DSA-1103
RHSA-2006:0575
RHSA-2006_0575
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾