PT-2017-14783 · Linux+5 · Linux Kernel+5

Kevin Cernekee

·

Publicado

2017-12-06

·

Atualizado

2024-06-15

·

CVE-2017-17448

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.14.5
Description The issue allows local users to bypass intended access restrictions. This is due to the lack of requirement for the CAP NET ADMIN capability for certain operations in the net/netfilter/nfnetlink cthelper.c module. The nfnl cthelper list data structure is shared across all net namespaces, which contributes to the problem.
Recommendations For Linux kernel versions prior to 4.14.5, update to version 4.14.5 or later to resolve the issue.

Correção

Missing Authorization

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

ALT-PU-2017-2788
ALT-PU-2018-1991
CESA-2018_1062
CVE-2017-17448
DSA-4073-1
DSA-4082-1
OPENSUSE-SU-2017_3358-1
OPENSUSE-SU-2017_3359-1
OPENSUSE-SU-2024:10728-1
OPENSUSE-SU-2024:13704-1
RHSA-2018:0654
RHSA-2018:0676
RHSA-2018:1062
RHSA-2018_0676
RHSA-2018_1062
SUSE-SU-2017:3398-1
SUSE-SU-2017:3410-1
SUSE-SU-2018:0031-1
SUSE-SU-2018:0115-1
SUSE-SU-2018:0213-1
USN-3617-1
USN-3617-2
USN-3617-3
USN-3619-1
USN-3619-2
USN-3620-1
USN-3620-2
USN-3632-1

Produtos afetados

Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu