CVE-2019-9162 In the Linux kernel before 4.20.12, net/ipv4/netfilter/nf_nat_snmp_basic_main.c in the SNMP NAT module has insufficient ASN.1 length checks (aka an array index error), making out-of-bounds read and wr...
HighCVSS 7.8
EPSS 1.1%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
In the Linux kernel before 4.20.12, net/ipv4/netfilter/nf_nat_snmp_basic_main.c in the SNMP NAT module has insufficient ASN.1 length checks (aka an array index error), making out-of-bounds read and write operations possible, leading to an OOPS or local privilege escalation. This affects snmp_version and snmp_helper.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/linux(Debian:12) | < 4.19.28-1 | 4.19.28-1 |
| debian/linux(Debian:13) | < 4.19.28-1 | 4.19.28-1 |
| debian/linux(Debian:14) | < 4.19.28-1 | 4.19.28-1 |
| Linux kernel | >= 4.19, < 4.19.25 | 4.19.25 |
| Linux kernel | >= 4.20, < 4.20.12 | 4.20.12 |
| netapp hci management node | All versions | No fix listed |
| netapp snapprotect | All versions | No fix listed |
| netapp solidfire | All versions | No fix listed |
| Canonical Ubuntu Linux | = 18.04 | No fix listed |
| Canonical Ubuntu Linux | = 18.10 | No fix listed |
| netapp cn1610 firmware | All versions | No fix listed |
References
- Debian Security Tracker CVE-2019-9162 vendor-advisory
- git.kernel.org mailing-list patch vendor-advisory
- 107159 broken-link vdb-entry
- bugs.chromium.org exploit issue-tracking mailing-list third-party-advisory
- cdn.kernel.org mailing-list vendor-advisory
- cdn.kernel.org mailing-list vendor-advisory
- github.com patch third-party-advisory
- security.netapp.com third-party-advisory
- support.f5.com third-party-advisory
- USN-3930-1 third-party-advisory vendor-advisory
- USN-3930-2 third-party-advisory vendor-advisory
- 46477 exploit patch third-party-advisory vdb-entry