CVE-2019-17052

LOW EPSS 45.8%
Published Oct 1, 20196y ago · Modified Jun 17, 20262w ago
3.3 CVSS 3.1
Low
Find Similar
Published Oct 1, 2019 6y ago
Last Modified Jun 17, 2026 2w ago

Description

ax25_create in net/ax25/af_ax25.c in the AF_AX25 network module in the Linux kernel 3.16 through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-0614e2b73768.

CVSS Details

Base Score
3.3
Exploitability
1.8
Impact
1.4
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity Low
Availability None

Threat Intelligence

EPSS Exploit Probability
45.8% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-276

Affected Products 7

VendorProductVersionRange
linuxlinux_kernel*≥3.16  –  ≤5.3.2
debiandebian_linux8.0any
fedoraprojectfedora29any
canonicalubuntu_linux14.04any
canonicalubuntu_linux16.04any
canonicalubuntu_linux18.04any
canonicalubuntu_linux19.04any

References 13

  • packetstormsecurity.com http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html
    Third Party AdvisoryVDB Entry
  • git.kernel.org https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=2c675dab816278a1724c1e93b384c2f05a11cb31
    Mailing ListPatchVendor Advisory
  • git.kernel.org https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0614e2b73768b502fc32a75349823356d98aae2c
    PatchVendor Advisory
  • git.kernel.org https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0edc3f703f7bcaf550774b5d43ab727bcd0fe06b
    PatchVendor Advisory
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html
    Mailing ListThird Party Advisory
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html
    Mailing ListThird Party Advisory
  • lists.fedoraproject.org https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U6JNEWGIK7QA24OIUUL67QZNJN52NB7T/
  • seclists.org https://seclists.org/bugtraq/2019/Nov/11
    Mailing ListPatchThird Party Advisory
  • usn.ubuntu.com https://usn.ubuntu.com/4184-1/
    Third Party Advisory
  • usn.ubuntu.com https://usn.ubuntu.com/4185-1/
    Third Party Advisory
  • usn.ubuntu.com https://usn.ubuntu.com/4185-2/
    Third Party Advisory
  • usn.ubuntu.com https://usn.ubuntu.com/4186-1/
    Third Party Advisory
  • usn.ubuntu.com https://usn.ubuntu.com/4186-2/
    Third Party Advisory

Remediation

  • git.kernel.org https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=2c675dab816278a1724c1e93b384c2f05a11cb31
    Mailing ListPatchVendor Advisory
  • git.kernel.org https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0614e2b73768b502fc32a75349823356d98aae2c
    PatchVendor Advisory
  • git.kernel.org https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0edc3f703f7bcaf550774b5d43ab727bcd0fe06b
    PatchVendor Advisory
  • seclists.org https://seclists.org/bugtraq/2019/Nov/11
    Mailing ListPatchThird Party Advisory