Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:35127
HistoryApr 16, 2022 - 4:32 p.m.

Privilege Escalation

2022-04-1616:32:53
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
43

0.0004 Low

EPSS

Percentile

5.1%

linux is vulnerable to heap buffer overflow flaw. The vulnerability exists in IPsec ESP transformation code in net/ipv4/esp4.c and net/ipv6/esp6.c which allows a local attacker with a normal user privilege to overwrite kernel heap objects and may cause a local privilege escalation threat.