CWE Code: 129
Vulnerability Type: privilege_escalation
CVSS Score: 4.6
CWE Name:  Improper Validation of Array Index
Summary: in the linux kernel before 4.20.12, net/ipv4/netfilter/nf_nat_snmp_basic_main.c in the snmp nat module has insufficient asn.1 length checks (aka an array index error), making out-of-bounds read and write operations possible, leading to an oops or local privilege escalation. this affects snmp_version and snmp_helper.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2019-02-25
Last Modified Date: 2019-06-15