VDB

CVE-2019-9162

CVE-2019-9162 PUBLISHED CVSS 7.800000190734863 HIGH

In the Linux kernel before 4.20.12, net/ipv4/netfilter/nf_nat_snmp_basic_main.c in the SNMP NAT module has insufficient ASN.1 length checks (aka an array index error), making out-of-bounds read and write operations possible, leading to an OOPS or local privilege escalation. This affects snmp_version and snmp_helper.

EPSS 1.09% · 64.1th percentile

Risk Scores

CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
1.09%
64.1th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSlinux-gcp-edge0, 4.18.0-1004.5~18.04.1, 4.18.0-1005.6~18.04.1
Ubuntu:18.04:LTSlinux-hwe0, 4.18.0-13.14~18.04.1, 4.18.0-15.16~18.04.1
Ubuntu:18.04:LTSlinux-azure0, 4.15.0-1002.2, 4.15.0-1003.3

Timeline

  • Feb 25, 2019 CVE Published
  • Mar 2, 2019 PoC Published
  • Apr 14, 2021 EPSS Score
  • Jun 23, 2021 EPSS Score
  • Aug 25, 2021 EPSS Score
  • Oct 27, 2021 EPSS Score
  • Dec 29, 2021 EPSS Score
  • Mar 2, 2022 EPSS Score
  • May 4, 2022 EPSS Score
  • Jul 6, 2022 EPSS Score
  • Sep 9, 2022 EPSS Score
  • Nov 11, 2022 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›