このページは Ubuntu 向けの修正状況です。脆弱性そのものの説明は CVE 本体のページにあります。
CVE-2017-17449 の詳細 →
UBUNTU-CVE-2017-17449
The __netlink_deliver_tap_skb function in net/netlink/af_netlink.c in the Linux kernel through 4.14.4, when CONFIG_NLMON is enabled, does not restrict...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
The __netlink_deliver_tap_skb function in net/netlink/af_netlink.c in the Linux kernel through 4.14.4, when CONFIG_NLMON is enabled, does not restrict observations of Netlink messages to a single net namespace, which allows local users to obtain sensitive information by leveraging the CAP_NET_ADMIN capability to sniff an nlmon interface for all Netlink activity on the system.
出典: OSV.dev (Open Source Vulnerabilities) OSV
影響パッケージ
Ubuntu:14.04:LTS
linux
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.0-149.199"}]}]
Ubuntu:14.04:LTS
linux-aws
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1016.16"}]}]
Ubuntu:14.04:LTS
linux-lts-xenial
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-119.143~14.04.1"}]}]
Ubuntu:16.04:LTS
linux
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-119.143"}]}]
Ubuntu:16.04:LTS
linux-aws
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1054.63"}]}]
Ubuntu:16.04:LTS
linux-azure
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.0-1018.21"}]}]
Ubuntu:16.04:LTS
linux-gcp
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.0-1017.21"}]}]
Ubuntu:16.04:LTS
linux-hwe
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.0-43.48~16.04.1"}]}]
Ubuntu:16.04:LTS
linux-kvm
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1020.25"}]}]
Ubuntu:16.04:LTS
linux-oem
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.0-1028.31"}]}]
Ubuntu:16.04:LTS
linux-raspi2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1086.94"}]}]
Ubuntu:16.04:LTS
linux-snapdragon
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1088.93"}]}]
Ubuntu:Pro:FIPS-updates:16.04:LTS
linux-fips
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1008.10"}]}]
Ubuntu:20.04:LTS
linux-azure-fde
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:20.04:LTS
linux-gke
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:20.04:LTS
linux-raspi2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:20.04:LTS
linux-riscv
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:22.04:LTS
linux-intel-iot-realtime
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:22.04:LTS
linux-realtime
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:22.04:LTS
linux-riscv
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:24.04:LTS
linux-raspi-realtime
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
参照URL
- advisory ubuntu.com
- advisory ubuntu.com
- advisory ubuntu.com
- advisory ubuntu.com
- advisory ubuntu.com
- advisory ubuntu.com
- advisory ubuntu.com
- report ubuntu.com
- report lkml.org
- report git.kernel.org
- report cve.org