Поиск уязвимостей
Количество 33
Количество 33
CVE-2017-17450
net/netfilter/xt_osf.c in the Linux kernel through 4.14.4 does not require the CAP_NET_ADMIN capability for add_callback and remove_callback operations, which allows local users to bypass intended access restrictions because the xt_osf_fingers data structure is shared across all net namespaces.
CVE-2017-17450
net/netfilter/xt_osf.c in the Linux kernel through 4.14.4 does not require the CAP_NET_ADMIN capability for add_callback and remove_callback operations, which allows local users to bypass intended access restrictions because the xt_osf_fingers data structure is shared across all net namespaces.
CVE-2017-17450
net/netfilter/xt_osf.c in the Linux kernel through 4.14.4 does not require the CAP_NET_ADMIN capability for add_callback and remove_callback operations, which allows local users to bypass intended access restrictions because the xt_osf_fingers data structure is shared across all net namespaces.
CVE-2017-17450
net/netfilter/xt_osf.c in the Linux kernel through 4.14.4 does not req ...
GHSA-qpxm-m9h2-3v4r
The __netlink_deliver_tap_skb function in net/netlink/af_netlink.c in the Linux kernel through 4.14.4, when CONFIG_NLMON is enabled, does not restrict observations of Netlink messages to a single net namespace, which allows local users to obtain sensitive information by leveraging the CAP_NET_ADMIN capability to sniff an nlmon interface for all Netlink activity on the system.
GHSA-5wr7-vvgp-w64f
net/netfilter/xt_osf.c in the Linux kernel through 4.14.4 does not require the CAP_NET_ADMIN capability for add_callback and remove_callback operations, which allows local users to bypass intended access restrictions because the xt_osf_fingers data structure is shared across all net namespaces.
ELSA-2018-4110
ELSA-2018-4110: Unbreakable Enterprise kernel security update (IMPORTANT)
ELSA-2018-4109
ELSA-2018-4109: Unbreakable Enterprise kernel security update (IMPORTANT)
ELSA-2019-4317
ELSA-2019-4317: Unbreakable Enterprise kernel security update (IMPORTANT)
SUSE-SU-2018:0011-1
Security update for the Linux Kernel
ELSA-2019-4316
ELSA-2019-4316: Unbreakable Enterprise kernel security update (IMPORTANT)
SUSE-SU-2018:0180-1
Security update for the Linux Kernel
SUSE-SU-2018:0040-1
Security update for the Linux Kernel
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2017-17450 net/netfilter/xt_osf.c in the Linux kernel through 4.14.4 does not require the CAP_NET_ADMIN capability for add_callback and remove_callback operations, which allows local users to bypass intended access restrictions because the xt_osf_fingers data structure is shared across all net namespaces. | CVSS3: 7.8 | 0% Низкий | почти 9 лет назад |
 | CVE-2017-17450 net/netfilter/xt_osf.c in the Linux kernel through 4.14.4 does not require the CAP_NET_ADMIN capability for add_callback and remove_callback operations, which allows local users to bypass intended access restrictions because the xt_osf_fingers data structure is shared across all net namespaces. | CVSS3: 4.4 | 0% Низкий | почти 9 лет назад |
 | CVE-2017-17450 net/netfilter/xt_osf.c in the Linux kernel through 4.14.4 does not require the CAP_NET_ADMIN capability for add_callback and remove_callback operations, which allows local users to bypass intended access restrictions because the xt_osf_fingers data structure is shared across all net namespaces. | CVSS3: 7.8 | 0% Низкий | почти 9 лет назад |
| CVE-2017-17450 net/netfilter/xt_osf.c in the Linux kernel through 4.14.4 does not req ... | CVSS3: 7.8 | 0% Низкий | почти 9 лет назад |
| GHSA-qpxm-m9h2-3v4r The __netlink_deliver_tap_skb function in net/netlink/af_netlink.c in the Linux kernel through 4.14.4, when CONFIG_NLMON is enabled, does not restrict observations of Netlink messages to a single net namespace, which allows local users to obtain sensitive information by leveraging the CAP_NET_ADMIN capability to sniff an nlmon interface for all Netlink activity on the system. | CVSS3: 4.7 | 0% Низкий | больше 4 лет назад |
| GHSA-5wr7-vvgp-w64f net/netfilter/xt_osf.c in the Linux kernel through 4.14.4 does not require the CAP_NET_ADMIN capability for add_callback and remove_callback operations, which allows local users to bypass intended access restrictions because the xt_osf_fingers data structure is shared across all net namespaces. | CVSS3: 7.8 | 0% Низкий | больше 4 лет назад |
| ELSA-2018-4110 ELSA-2018-4110: Unbreakable Enterprise kernel security update (IMPORTANT) | больше 8 лет назад | ||
| ELSA-2018-4109 ELSA-2018-4109: Unbreakable Enterprise kernel security update (IMPORTANT) | больше 8 лет назад | ||
| ELSA-2019-4317 ELSA-2019-4317: Unbreakable Enterprise kernel security update (IMPORTANT) | почти 8 лет назад | ||
 | SUSE-SU-2018:0011-1 Security update for the Linux Kernel | почти 9 лет назад | ||
| ELSA-2019-4316 ELSA-2019-4316: Unbreakable Enterprise kernel security update (IMPORTANT) | почти 8 лет назад | ||
| SUSE-SU-2018:0180-1 Security update for the Linux Kernel | почти 9 лет назад | ||
| SUSE-SU-2018:0040-1 Security update for the Linux Kernel | почти 9 лет назад |
Уязвимостей на страницу