{"uuid": "3f63db85-5310-400b-b3cd-7e79a2936d8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22555", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_xtables_heap_oob_write_priv_esc.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"x64\", \"author\": [\"Andy Nguyen (theflow \", \"Szymon Janusz\", \"bcoles \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c.\\n          This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space.\\n          Kernels up to 5.11 (including) are vulnerable.\\n          More information about vulnerable kernels is\\n          available at https://nvd.nist.gov/vuln/detail/CVE-2021-22555#vulnConfigurationsArea\", \"disclosure_date\": \"2021-07-07\", \"fullname\": \"exploit/linux/local/netfilter_xtables_heap_oob_write_priv_esc\", \"is_install_path\": true, \"mod_time\": \"2025-02-28 09:35:28 +0000\", \"name\": \"Netfilter x_tables Heap OOB Write Privilege Escalation\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unreliable-session\"], \"SideEffects\": [\"artifacts-on-disk\"], \"Stability\": [\"os-resource-loss\"]}, \"path\": \"/modules/exploits/linux/local/netfilter_xtables_heap_oob_write_priv_esc.rb\", \"platform\": \"Linux\", \"post_auth\": false, \"rank\": 500, \"ref_name\": \"linux/local/netfilter_xtables_heap_oob_write_priv_esc\", \"references\": [\"CVE-2021-22555\", \"URL-http://web.archive.org/web/20250116045131/https://google.github.io/security-research/pocs/linux/cve-2021-22555/writeup.html\", \"URL-https://nvd.nist.gov/vuln/detail/CVE-2021-22555\", \"URL-https://ubuntu.com/security/CVE-2021-22555\"], \"rport\": null, \"session_types\": [\"meterpreter\", \"shell\"], \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:10.232505Z"}