NetSight
IP …
low3.3

CVE-2019-17055

base_sock_create in drivers/isdn/mISDN/socket.c in the AF_ISDN network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that …

Impact

base_sock_create in drivers/isdn/mISDN/socket.c in the AF_ISDN network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-b91ee4aa2a21.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 5.3.2
DebianDebian Linux
Version 8.0
FedoraprojectFedora
Version 29
CanonicalUbuntu Linux
Versions 14.04, 16.04, 18.04, 19.04
OpensuseLeap
Versions 15.0, 15.1
RedhatEnterprise Linux Desktop
Version 6.0
RedhatEnterprise Linux Server
Version 6.0
RedhatEnterprise Linux Workstation
Version 6.0

Weakness classification

CWE-862

References