libnetfilter_cthelper Use After Free Memory Corruption Vulnerability

Bugtraq ID:	74250
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Apr 21 2015 12:00AM
Updated:	Apr 21 2015 12:00AM
Credit:	Seth Arnold
Vulnerable:	Pablo Neira Ayuso libnetfilter_cthelper 1.0.0-1
Not Vulnerable:

libnetfilter_cthelper Use After Free Memory Corruption Vulnerability

libnetfilter_cthelper is prone to a use-after-free memory-corruption vulnerability.

Successful exploits may allow an attacker to execute arbitrary code in the context of the affected application or result in denial-of-service conditions.

libnetfilter_cthelper Use After Free Memory Corruption Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

libnetfilter_cthelper Use After Free Memory Corruption Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

libnetfilter_cthelper Use After Free Memory Corruption Vulnerability

References:

• libnetfilter_cthelper Homepage (Pablo Neira Ayuso)
  
• use-after-free in src/libnetfilter_cthelper.c (Seth Arnold)