{"vulnerability": "cve-2016-4998", "sightings": [{"uuid": "7bd30a4c-b10a-49b8-b586-d2489534d6dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-4998", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:42.000000Z"}, {"uuid": "7e27f524-b822-4bfc-b51e-50279810cd8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-4998", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:48.000000Z"}, {"uuid": "afecf091-977b-439e-95f8-f0cba91739ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-4998", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_priv_esc_ipv4.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "4b72dda3-bf79-4a59-9785-51591e812eac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-4998", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_priv_esc_ipv4.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"x86, x64\", \"author\": [\"h00die \", \"vnik\", \"Jesse Hertz\", \"Tim Newsham\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"This module attempts to exploit a netfilter bug on Linux Kernels before 4.6.3, and currently\\n          only works against Ubuntu 16.04 (not 16.04.1) with kernel 4.4.0-21-generic.\\n\\n          Several conditions have to be met for successful exploitation:\\n          Ubuntu:\\n          1. ip_tables.ko (ubuntu), iptable_raw (fedora) has to be loaded (root running iptables -L will do such)\\n          2. libc6-dev-i386 (ubuntu), glibc-devel.i686 & libgcc.i686 (fedora) needs to be installed to compile\\n          Kernel 4.4.0-31-generic and newer are not vulnerable. This exploit does not bypass SMEP/SMAP.\\n\\n          We write the ascii files and compile on target instead of locally since metasm bombs for not\\n          having cdefs.h (even if locally installed)\", \"disclosure_date\": \"2016-06-03\", \"fullname\": \"exploit/linux/local/netfilter_priv_esc_ipv4\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:57:34 +0000\", \"name\": \"Linux Kernel 4.6.3 Netfilter Privilege Escalation\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unreliable-session\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"crash-os-down\"]}, \"path\": \"/modules/exploits/linux/local/netfilter_priv_esc_ipv4.rb\", \"platform\": \"Linux\", \"post_auth\": false, \"rank\": 400, \"ref_name\": \"linux/local/netfilter_priv_esc_ipv4\", \"references\": [\"EDB-40049\", \"CVE-2016-4997\", \"CVE-2016-4998\", \"URL-https://www.openwall.com/lists/oss-security/2016/06/24/5\", \"URL-http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ce683e5f9d045e5d67d1312a42b359cb2ab2a13c\", \"URL-https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6e94e0cfb0887e4013b3b930fa6ab1fe6bb6ba91\"], \"rport\": null, \"session_types\": [\"shell\", \"meterpreter\"], \"targets\": [\"Ubuntu\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:10.115400Z"}]}