what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Netfilter nft_set_elem_init Heap Overflow Privilege Escalation

Posted Sep 28, 2022

Authored by Redouane Niboucha, Arthur Mongodin | Site metasploit.com

An issue was discovered in the Linux kernel through version 5.18.9. A type confusion bug in nft_set_elem_init (leading to a buffer overflow) could be used by a local attacker to escalate privileges. The attacker can obtain root access, but must start with an unprivileged user namespace to obtain CAP_NET_ADMIN access. The issue exists in nft_setelem_parse_data in net/netfilter/nf_tables_api.c.

tags | exploit, overflow, kernel, local, root

systems | linux

advisories | CVE-2022-34918

SHA-256 | a48b50f226770ad9be34695226967d12509d7dd73ec5b350a5c71eafda86cc6b

Download | Favorite | View

Related Files

No related files