CVE-2019-17053
kernel: unprivileged users able to create RAW sockets in AF_IEEE802154 network protocol
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
ieee802154_create in net/ieee802154/socket.c in the AF_IEEE802154 network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-e69dbd4619e7.
ieee802154_create en net / ieee802154 / socket.c en el módulo de red AF_IEEE802154 en el kernel de Linux hasta la versión 5.3.2 no aplica CAP_NET_RAW, lo que significa que los usuarios no privilegiados pueden crear un socket en bruto, también conocido como CID-e69dbd4619e7.
A vulnerability was discovered in the Linux kernel's AF_IEEE802154 networking module where permissions checks are not enforced. This can allow an unprivileged user to create raw sockets for this protocol leading to the potential for data leaks or system unavailability.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2019-10-01 CVE Reserved
- 2019-10-01 CVE Published
- 2024-08-05 CVE Updated
- 2024-09-24 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-250: Execution with Unnecessary Privileges
- CWE-276: Incorrect Default Permissions
CAPEC
References (14)
| URL | Tag | Source |
|---|---|---|
| http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html | X_refsource_misc |
|
| https://lists.debian.org/debian-lts-announce/2020/01/msg00013.html | Mailing List |
|
| https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html | Mailing List |
|
| https://seclists.org/bugtraq/2019/Nov/11 | Mailing List |
|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U6JNEWGIK7QA24OIUUL67QZNJN52NB7T | 2023-11-07 | |
| https://usn.ubuntu.com/4184-1 | 2023-11-07 | |
| https://usn.ubuntu.com/4185-1 | 2023-11-07 | |
| https://usn.ubuntu.com/4185-2 | 2023-11-07 | |
| https://usn.ubuntu.com/4186-1 | 2023-11-07 | |
| https://usn.ubuntu.com/4186-2 | 2023-11-07 | |
| https://access.redhat.com/security/cve/CVE-2019-17053 | 2020-09-29 | |
| https://bugzilla.redhat.com/show_bug.cgi?id=1758242 | 2020-09-29 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | <= 5.3.2 Search vendor "Linux" for product "Linux Kernel" and version " <= 5.3.2" | - |
Affected
| ||||||