CVE-2017-17450

 

Published at: - 07-12-2017 01:29

Last modified: - 26-10-2022 01:44

Total changes: - 3

Description

net/netfilter/xt_osf.c in the Linux kernel through 4.14.4 does not require the CAP_NET_ADMIN capability for add_callback and remove_callback operations, which allows local users to bypass intended access restrictions because the xt_osf_fingers data structure is shared across all net namespaces.

Common Vulnerability Scoring System (CVSS)

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

 

Verification logic

 

Reference

• https://lkml.org/lkml/2017/12/5/982
• 102110-Third Party Advisory, VDB Entry
• DSA-4073-
• SUSE-SU-2018:0011-
• DSA-4082-
• USN-3583-2-
• USN-3583-1-
• USN-3617-2-
• USN-3617-1-
• USN-3619-1-
• USN-3617-3-
• USN-3619-2-
• USN-3632-1-

 

Keywords

NVD

 

CVE-2017-17450

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures