CVE-2019-11360CWE-787

CVE-2019-11360

Medium · published July 12, 2019

CVSS v3.1
4.2
EPSS
2%
Percentile
82.7
In the wild
Unconfirmed
What it is

A buffer overflow in iptables-restore in netfilter iptables 1.8.2 allows an attacker to (at least) crash the program or potentially gain code execution via a specially crafted iptables-save file. This is related to add_param_to_argv in xshared.c.

The record
Technical detail
CVSS v3.1
4.2 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.02239 · 82.7th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2019-07-12T18:15Z
Affected products (1)
ProductVersionsFixed in
netfilter/iptablesall versions—
References (5)
https://0day.work/cve-2019-11360-bufferoverflow-in-iptables-restore-v1-8-2/ · [email protected]https://git.netfilter.org/iptables/commit/iptables/xshared.c?id=2ae1099a42e6a0f06de305ca13a842ac83d4683e · [email protected]https://0day.work/cve-2019-11360-bufferoverflow-in-iptables-restore-v1-8-2/ · af854a3a-2127-422b-91ae-364da2661108https://git.netfilter.org/iptables/commit/iptables/xshared.c?id=2ae1099a42e6a0f06de305ca13a842ac83d4683e · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-398330.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 12 JUL 13:54Z
    A buffer overflow in iptables-restore in netfilter iptables 1.8.2 allows an attacker to (at least) crash the program or potentially gain code execution via a…
    cvelistv5