CVE-2019-17054

Published: 01/10/2019 Updated: 07/11/2023

CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9

CVSS v3 Base Score: 3.3 | Impact Score: 1.4 | Exploitability Score: 1.8

VMScore: 187

Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N

atalk_create in net/appletalk/ddp.c in the AF_APPLETALK network module in the Linux kernel up to and including 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-6cc03e8aa36c.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel

Several issues were fixed in the Linux kernel ...

Several security issues were fixed in the Linux kernel ...

Several issues were fixed in the Linux kernel ...

Impact: Moderate Public Date: 2019-09-20 CWE: CWE-250 Bugzilla: 1758245: CVE-2019-17054 kernel: privile ...

CWE-276 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6cc03e8aa36c51f3b26a0d21a3c4ce2809c842ac https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0edc3f703f7bcaf550774b5d43ab727bcd0fe06b https://seclists.org/bugtraq/2019/Nov/11 http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html https://usn.ubuntu.com/4184-1/https://usn.ubuntu.com/4185-1/https://usn.ubuntu.com/4186-1/https://usn.ubuntu.com/4185-2/https://usn.ubuntu.com/4186-2/https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U6JNEWGIK7QA24OIUUL67QZNJN52NB7T/https://nvd.nist.gov https://usn.ubuntu.com/4184-2/

CVE-2019-17054

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect