PT-2017-14785 · Linux+3 · Linux Kernel+3

Kevin Cernekee

·

Publicado

2017-12-06

·

Atualizado

2024-06-15

·

CVE-2017-17450

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.14.5
Description The issue allows local users to bypass intended access restrictions. This is due to the fact that the xt osf fingers data structure is shared across all net namespaces, and the add callback and remove callback operations do not require the CAP NET ADMIN capability.
Recommendations For Linux kernel versions prior to 4.14.5, update to version 4.14.5 or later to resolve the issue.

Correção

Missing Authorization

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

ALT-PU-2017-2788
ALT-PU-2018-1991
CVE-2017-17450
DSA-4073-1
DSA-4082-1
OPENSUSE-SU-2017_3358-1
OPENSUSE-SU-2017_3359-1
OPENSUSE-SU-2024:10728-1
OPENSUSE-SU-2024:13704-1
SUSE-SU-2017:3398-1
SUSE-SU-2017:3410-1
SUSE-SU-2018:0011-1
SUSE-SU-2018:0031-1
SUSE-SU-2018:0040-1
SUSE-SU-2018:0115-1
SUSE-SU-2018:0180-1
SUSE-SU-2018:0213-1
USN-3583-1
USN-3583-2
USN-3617-1
USN-3617-2
USN-3617-3
USN-3619-1
USN-3619-2
USN-3632-1

Produtos afetados

Alt Linux
Linux Kernel
Suse
Ubuntu