PT-2021-4257 · Linux+5 · Linux Kernel+5
Wade Mealing
·
Published
2020-01-12
·
Updated
2021-06-02
·
CVE-2021-20177
CVSS v3.1
4.4
Medium
| Vector | AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 5.5-rc1
Description
The issue is related to a buffer overflow in memory, allowing an attacker to cause a denial of service. A flaw was found in the Linux kernel's implementation of string matching within a packet, which can be exploited by a privileged user to insert a rule that can panic the system.
Recommendations
For Linux kernel versions prior to 5.5-rc1, update to a version 5.5-rc1 or later to resolve the issue. As a temporary workaround, consider restricting the insertion of iptables rules to minimize the risk of exploitation. Avoid using the
iptables command with untrusted input until the issue is resolved.Exploit
Fix
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Suse
Ubuntu