CVE-2019-9162

Fixed in a distro release EPSS 1%

In the Linux kernel before 4.20.12, net/ipv4/netfilter/nf_nat_snmp_basic_main.c in the SNMP NAT module has insufficient ASN.1 length checks (aka an array index error), making out-of-bounds read and write operations possible, leading to an OOPS or local privilege escalation. This affects snmp_version and snmp_helper.

Published 2019-02-25 · CVE record · OSV

Products: linux_kernel, netapp hci_management_node, netapp snapprotect, netapp solidfire, canonical ubuntu_linux, netapp cn1610_firmware

Distro releases