CVE-2016-4997

The compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations in the netfilter subsystem in the Linux kernel before 4.6.3 allow local users…

published July 3, 2016

CVSS
—
EPSS
6%
Percentile
92.9
In the wild
Unconfirmed
What it is

The compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations in the netfilter subsystem in the Linux kernel before 4.6.3 allow local users to gain privileges or cause a denial of service (memory corruption) by leveraging in-container root access to provide a crafted offset value that triggers an unintended decrement.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05676 · 92.9th percentile
Published
2016-07-03T21:00Z
EPSS history
Timeline
  • 03 JUL 21:00Z
    The compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations in the netfilter subsystem in the Linux kernel before 4.6.3 allow local users…
    cvelistv5