Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The experimental IP packet queuing feature in Netfilter / IPTables in Linux kernel 2.4 up to 2.4.19 and 2.5 up to 2.5.31, when a privileged process exits and network traffic is not being queued, may allow a later process with the same Process ID (PID) to access certain network traffic that would otherwise be restricted.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Linux Netfilter/IPTables IP队列任意网络通信可读漏洞
Vulnerability Description
IPTables和Netfilter是Linux kernel下的防火墙构架实现。 IP队列需要高权限进程与用户空间通信来处理本地主机上的网络通信队列，由于不充分检查特权进程的完整性，本地攻击者可以利用这个漏洞获得高权限进程的网络通信部分信息。 在Linux2.4和2.5中，IP包队列功能是作为Netfilter/IPTalbes试验性的功能，可以允许用户空间调裁(mediation)和修改IPV4和IPV6数据包。 用户空间调裁进程需要高权限(NET_ADMIN)处理来自内核的数据包，在开始调裁数据包时
CVSS Information
N/A
Vulnerability Type
N/A