CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2021-225557.8/HIGHEPSS 78.7%CISA KEV
2021-07-07

Linux Kernel Netfilter x_tables Heap Out-of-Bounds Write Local Privilege Escalation (CVE-2021-22555) Analysis and Mitigation Guide

[Affected Scope] Linux Kernel versions since v2.6.19-rc1 that lack the official security patch, particularly environments with user namespaces enabled

[Impact] A local attacker can trigger heap memory corruption to escalate privileges to root or cause a system-wide Denial of Service (DoS)

[Mitigation] Upgrade the Linux kernel to the latest stable release, or apply temporary workarounds to restrict unprivileged user namespace creation

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse