CVE-2018-1065

The netfilter subsystem in the Linux kernel through 4.15.7 mishandles the case of a rule blob that contains a jump but lacks a user-defined chain, which allows local users to cause a denial of service (NULL pointer dereference) by leveraging the CAP_NET_RAW or CAP_NET_ADMIN capability, related to arpt_do_table in net/ipv4/netfilter/arp_tables.c, ipt_do_table in net/ipv4/netfilter/ip_tables.c, and ip6t_do_table in net/ipv6/netfilter/ip6_tables.c.

• CWE-476

• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=57ebd808a97d7c5b1e1afb937c2db22beba3c1f8Patch, Vendor Advisory
• http://lists.openwall.net/netdev/2018/01/27/46Third Party Advisory
• http://patchwork.ozlabs.org/patch/870355/Patch, Third Party Advisory
• http://www.securitytracker.com/id/1040446Third Party Advisory, VDB Entry
• https://access.redhat.com/errata/RHSA-2018:2948
• https://bugzilla.redhat.com/show_bug.cgi?id=1547824Issue Tracking, Third Party Advisory
• https://github.com/torvalds/linux/commit/57ebd808a97d7c5b1e1afb937c2db22beba3c1f8Patch, Third Party Advisory
• https://usn.ubuntu.com/3654-1/
• https://usn.ubuntu.com/3654-2/
• https://usn.ubuntu.com/3656-1/
• https://www.debian.org/security/2018/dsa-4188
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=57ebd808a97d7c5b1e1afb937c2db22beba3c1f8Patch, Vendor Advisory
• http://lists.openwall.net/netdev/2018/01/27/46Third Party Advisory
• http://patchwork.ozlabs.org/patch/870355/Patch, Third Party Advisory
• http://www.securitytracker.com/id/1040446Third Party Advisory, VDB Entry
• https://access.redhat.com/errata/RHSA-2018:2948
• https://bugzilla.redhat.com/show_bug.cgi?id=1547824Issue Tracking, Third Party Advisory
• https://github.com/torvalds/linux/commit/57ebd808a97d7c5b1e1afb937c2db22beba3c1f8Patch, Third Party Advisory
• https://usn.ubuntu.com/3654-1/
• https://usn.ubuntu.com/3654-2/
• https://usn.ubuntu.com/3656-1/
• https://www.debian.org/security/2018/dsa-4188

Published

Mar 2, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-10642Command injection vulnerability in Combodo iTop 2.4.1 allows…
• CVE-2018-10645Golden Frog VyprVPN 2.12.1.8015 for Windows suffers from a S…
• CVE-2018-10646CyberGhost 6.5.0.3180 for Windows suffers from a SYSTEM priv…
• CVE-2018-10647SaferVPN 4.2.5 for Windows suffers from a SYSTEM privilege e…
• CVE-2018-10648There are Unauthenticated File Upload Vulnerabilities in Cit…
• CVE-2018-10649There is a Cross-Site Scripting Vulnerability in Citrix XenM…
• CVE-2018-10650There is an Insufficient Path Validation Vulnerability in Ci…
• CVE-2018-10651There are Open Redirect Vulnerabilities in Citrix XenMobile …
• CVE-2018-10652There is a Sensitive Data Leakage issue in Citrix XenMobile …
• CVE-2018-10653There is an XML External Entity (XXE) Processing Vulnerabili…
• CVE-2018-10654There is a Hazelcast Library Java Deserialization Vulnerabil…
• CVE-2018-10655DLPnpAuditor.exe in DeviceLock Plug and Play Auditor (freewa…