In the Linux kernel before 4.20.12, net/ipv4/netfilter/nf_nat_snmp_basic_main.c in the SNMP NAT module has insufficient ASN.1 length checks (aka an array index error), making out-of-bounds read and write operations possible, leading to an OOPS or local privilege escalation. This affects snmp_version and snmp_helper.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9162
Reference (s):
- BID:107159
- URL: http://www.securityfocus.com/bid/107159
- https://security.netapp.com/advisory/ntap-20190327-0002/
- https://support.f5.com/csp/article/K31864522
- EXPLOIT-DB:46477