Integer overflow in the xtalloctableinfo function in net/netfilter/xtables.c in the Linux kernel through 4.5.2 on 32-bit platforms allows local users to gain privileges or cause a denial of service (heap memory corruption) via an IPTSOSET_REPLACE setsockopt call.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-3135.json"
[
{
"events": [
{
"introduced": "4.2"
},
{
"fixed": "4.4.21"
}
]
},
{
"events": [
{
"introduced": "4.5"
},
{
"fixed": "4.6"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.04"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "15.10"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "16.04"
}
]
}
]