PT-2019-4752 · Linux+5 · Linux Kernel+5
Ori Nimron
·
Publicado
2019-09-20
·
Atualizado
2022-03-31
·
CVE-2019-17055
CVSS v3.1
3.3
Baixa
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions through 5.3.2
Description
The issue is related to the
base sock create function in the AF ISDN network module of the Linux kernel, which lacks sufficient input validation. This can be exploited to impact data integrity. Unprivileged users can create a raw socket due to the lack of enforcement of the CAP NET RAW capability.Recommendations
For Linux kernel versions through 5.3.2, update to a version that contains a fix for this issue to prevent unprivileged users from creating raw sockets.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
RCE
Missing Authorization
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu