Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).
Severity
7.8HIGHNVD
EPSS
0.2%
top 57.33%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Timeline
PublishedFeb 25
Latest updateMay 13

Description

In the Linux kernel before 4.20.12, net/ipv4/netfilter/nf_nat_snmp_basic_main.c in the SNMP NAT module has insufficient ASN.1 length checks (aka an array index error), making out-of-bounds read and write operations possible, leading to an OOPS or local privilege escalation. This affects snmp_version and snmp_helper.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages3 packages

NVDlinux/linux_kernel4.194.19.25+1
Debianlinux/linux_kernel< 4.19.28-1+3
debiandebian/linux< linux 4.19.28-1 (bookworm)

Also affects: Ubuntu Linux 18.04, 18.10

Patches

🔴Vulnerability Details

3
GHSA
GHSA-rcwp-79mw-gmr5: In the Linux kernel before 42022-05-13
OSV
linux-hwe, linux-azure vulnerabilities2019-04-02
OSV
CVE-2019-9162: In the Linux kernel before 42019-02-25

💥Exploits & PoCs

1
Exploit-DB
Linux < 4.14.103 / < 4.19.25 - Out-of-Bounds Read and Write in SNMP NAT Module2019-03-01

📋Vendor Advisories

4
Ubuntu
Linux kernel (HWE) vulnerabilities2019-04-02
Ubuntu
Linux kernel vulnerabilities2019-04-02
Red Hat
kernel: out-of-bounds read/write in et/ipv4/netfilter/nf_nat_snmp_basic_main.c in the SNMP NAT module2019-02-11
Debian
CVE-2019-9162: linux - In the Linux kernel before 4.20.12, net/ipv4/netfilter/nf_nat_snmp_basic_main.c ...2019

💬Community

2
Bugzilla
CVE-2019-9162 kernel: out-of-bounds read/write in et/ipv4/netfilter/nf_nat_snmp_basic_main.c in the SNMP NAT module2019-02-26
Bugzilla
CVE-2019-9162 kernel: out-of-bounds read/write in et/ipv4/netfilter/nf_nat_snmp_basic_main.c in the SNMP NAT module [fedora-all]2019-02-26