A buffer overflow in iptables-restore in netfilter iptables 1.8.2 allows an attacker to (at least) crash the program or potentially gain code execution via a specially crafted iptables-save file. This is related to add_param_to_argv in xshared.c.
References
| Link | Resource |
|---|---|
| https://0day.work/cve-2019-11360-bufferoverflow-in-iptables-restore-v1-8-2/ | Exploit Patch Third Party Advisory |
| https://git.netfilter.org/iptables/commit/iptables/xshared.c?id=2ae1099a42e6a0f06de305ca13a842ac83d4683e | Patch Third Party Advisory URL Repurposed |
| https://0day.work/cve-2019-11360-bufferoverflow-in-iptables-restore-v1-8-2/ | Exploit Patch Third Party Advisory |
| https://git.netfilter.org/iptables/commit/iptables/xshared.c?id=2ae1099a42e6a0f06de305ca13a842ac83d4683e | Patch Third Party Advisory URL Repurposed |
Configurations
History
21 Nov 2024, 04:20
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://0day.work/cve-2019-11360-bufferoverflow-in-iptables-restore-v1-8-2/ - Exploit, Patch, Third Party Advisory | |
| References | () https://git.netfilter.org/iptables/commit/iptables/xshared.c?id=2ae1099a42e6a0f06de305ca13a842ac83d4683e - Patch, Third Party Advisory, URL Repurposed |
14 Feb 2024, 01:17
| Type | Values Removed | Values Added |
|---|---|---|
| References | (CONFIRM) https://git.netfilter.org/iptables/commit/iptables/xshared.c?id=2ae1099a42e6a0f06de305ca13a842ac83d4683e - Patch, Third Party Advisory, URL Repurposed |
Information
Published : 2019-07-12 14:15
Updated : 2024-11-21 04:20
NVD link : CVE-2019-11360
Mitre link : CVE-2019-11360
CVE.ORG link : CVE-2019-11360
JSON object : View
Products Affected
netfilter
- iptables
CWE
CWE-787
Out-of-bounds Write