CVE-2016-4997 in Kernel
Summary
The compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations in the netfilter subsystem in the Linux kernel before 4.6.3 allow local users to gain privileges or cause a denial of service (memory corruption) by leveraging in-container root access to provide a crafted offset value that triggers an unintended decrement.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
05/24/2016
Disclosure
07/03/2016
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 88138 | Linux Kernel setsockopt access control | 264 | High | Official fix | CVE-2016-4997 |
| 88137 | Linux Kernel compat_setsockopt access control | 264 | High | Official fix | CVE-2016-4997 |