CVE-2017-17448

 

Published at: - 07-12-2017 01:29

Last modified: - 26-10-2022 01:44

Total changes: - 3

Description

net/netfilter/nfnetlink_cthelper.c in the Linux kernel through 4.14.4 does not require the CAP_NET_ADMIN capability for new, get, and del operations, which allows local users to bypass intended access restrictions because the nfnl_cthelper_list data structure is shared across all net namespaces.

Common Vulnerability Scoring System (CVSS)

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

 

Verification logic

 

Reference

• https://patchwork.kernel.org/patch/10089373/
• 102117-Third Party Advisory, VDB Entry
• DSA-4073-
• DSA-4082-
• USN-3617-2-
• USN-3617-1-
• USN-3620-2-
• USN-3620-1-
• USN-3619-1-
• USN-3617-3-
• USN-3619-2-
• RHSA-2018:0654-
• RHSA-2018:1062-
• RHSA-2018:0676-
• USN-3632-1-

 

Keywords

NVD

 

CVE-2017-17448

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures