Published: 01/10/2019 Updated: 07/11/2023

CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9

CVSS v3 Base Score: 3.3 | Impact Score: 1.4 | Exploitability Score: 1.8

VMScore: 187

Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N

ax25_create in net/ax25/af_ax25.c in the AF_AX25 network module in the Linux kernel 3.16 up to and including 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-0614e2b73768.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel
debian debian linux 8.0
fedoraproject fedora 29
canonical ubuntu linux 18.04
canonical ubuntu linux 19.04
canonical ubuntu linux 14.04
canonical ubuntu linux 16.04

Impact: Moderate Public Date: 2019-09-20 CWE: CWE-250 Bugzilla: 1758239: CVE-2019-17052 kernel: privile ...

Several issues were fixed in the Linux kernel ...

Several security issues were fixed in the Linux kernel ...

Several issues were fixed in the Linux kernel ...

CWE-276 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0614e2b73768b502fc32a75349823356d98aae2c https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0edc3f703f7bcaf550774b5d43ab727bcd0fe06b https://seclists.org/bugtraq/2019/Nov/11 http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html https://usn.ubuntu.com/4184-1/https://usn.ubuntu.com/4185-1/https://usn.ubuntu.com/4186-1/https://usn.ubuntu.com/4185-2/https://usn.ubuntu.com/4186-2/https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=2c675dab816278a1724c1e93b384c2f05a11cb31 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U6JNEWGIK7QA24OIUUL67QZNJN52NB7T/https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2019-17052 https://usn.ubuntu.com/4184-2/

CVE-2019-17052

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect