CVE-2015-1573 in Kernel
Summary
The nft_flush_table function in net/netfilter/nf_tables_api.c in the Linux kernel before 3.18.5 mishandles the interaction between cross-chain jumps and ruleset flushes, which allows local users to cause a denial of service (panic) by leveraging the CAP_NET_ADMIN capability.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservation
02/09/2015
Disclosure
05/02/2016
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 69107 | Linux Kernel Netfilter nf_tables_api.c nft_flush_table data processing | 19 | Unproven | Official fix | CVE-2015-1573 |