CVE-2006-0038 Integer overflow in n/a
Local attackers with CAP_NET_ADMIN can trigger an integer overflow in netfilter to cause a buffer overflow, potentially leading to code execution or privilege escalation.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2006-0038?
CVE-2006-0038 is a medium-severity vulnerability in Linux kernel, published on 22 Mar 2006. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Integer overflow in the do_replace function in netfilter for Linux before 2.6.16-rc3, when using "virtualization solutions" such as OpenVZ, allows local users with CAP_NET_ADMIN rights to cause a buffer overflow in the copy_from_user function.
Weakness: CWE-189
Which versions are affected by CVE-2006-0038?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2006-0038?
Apply the vendor's patch.
Is CVE-2006-0038 being exploited?
There is no known exploitation of CVE-2006-0038 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as GHSA-gxh4-jjxm-xp63.