CVE Vulnerability

CVE-2019-11360

A buffer overflow in iptables-restore in netfilter iptables 1.8.2 allows an attacker to (at least) crash the program or potentially gain code execution via a specially crafted iptables-save file. This is related to add_param_to_argv in xshared.c.

3.5 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 6.8 / Impact : 2.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

Scope

4.2 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.6 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.netfilter.org/iptables/commit/iptables/xshared.c?id=2ae1099a42e6a0f06de305ca13a842ac83d4683e Patch Third Party Advisory
https://0day.work/cve-2019-11360-bufferoverflow-in-iptables-restore-v1-8-2/ Exploit Patch
Configurations

Configuration 1

cpe:2.3:a:netfilter:iptables:1.8.2:*:*:*:*:*:*:*
Information

Published : 2019-07-12 02:15

Updated : 2021-07-21 11:39

NVD link : CVE-2019-11360

Mitre link : CVE-2019-11360

Products Affected
No products.
CWE
CWE-787