CVE-2019-11360

MEDIUM 4.2CVE-2019-11360 · Published 12/07/2019 · updated 14/10/2026

In short

CVE-2019-11360 is a MEDIUM (CVSS 4.2) vulnerability affecting iptables (netfilter).
Chance of exploitation in the next 30 days (EPSS): 2.2%, higher than 82.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
iptables netfilter	`= 1.8.2`	No fix yet

Description

A buffer overflow in iptables-restore in netfilter iptables 1.8.2 allows an attacker to (at least) crash the program or potentially gain code execution via a specially crafted iptables-save file. This is related to add_param_to_argv in xshared.c.

References

0day.work/cve-2019-11360-bufferoverflow-in-iptables-restore-v1-8-2 · Exploit
git.netfilter.org/iptables/commit/iptables/xshared.c · Patch
cert-portal.siemens.com/productcert/html/ssa-398330.html

More vulnerabilities in iptables

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free