PT-2019-4654 · Linux+3 · Linux Kernel+3
Muyu Yu
·
Published
2019-01-02
·
Updated
2020-06-18
·
CVE-2019-3701
CVSS v2.0
4.9
Medium
| Vector | AV:L/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions through 4.19.13
Description
The issue is related to a buffer overflow vulnerability in the
can can gw rcv function in net/can/gw.c of the Linux kernel. This vulnerability can be exploited to cause a denial of service. A privileged user with CAP NET ADMIN capabilities can create a CAN frame modification rule that allows bitwise logical operations on the can dlc field, potentially leading to a system crash. The vulnerability occurs because the CAN drivers may write arbitrary content beyond the data registers in the CAN controller's I/O memory when processing manipulated outgoing frames.Recommendations
For Linux kernel versions through 4.19.13, consider disabling the
can can gw rcv function as a temporary workaround until a patch is available. Restrict access to the CAP NET ADMIN capability to minimize the risk of exploitation. Avoid using the can dlc field in CAN frame modification rules until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Linux Kernel
Suse
Ubuntu