Cette page suit l'état du correctif pour Ubuntu. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2017-17449 →

UBUNTU-CVE-2017-17449

The __netlink_deliver_tap_skb function in net/netlink/af_netlink.c in the Linux kernel through 4.14.4, when CONFIG_NLMON is enabled, does not restrict...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

The __netlink_deliver_tap_skb function in net/netlink/af_netlink.c in the Linux kernel through 4.14.4, when CONFIG_NLMON is enabled, does not restrict observations of Netlink messages to a single net namespace, which allows local users to obtain sensitive information by leveraging the CAP_NET_ADMIN capability to sniff an nlmon interface for all Netlink activity on the system.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Ubuntu:14.04:LTS linux

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.0-149.199"}]}]

Ubuntu:14.04:LTS linux-aws

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1016.16"}]}]

Ubuntu:14.04:LTS linux-lts-xenial

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-119.143~14.04.1"}]}]

Ubuntu:16.04:LTS linux

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-119.143"}]}]

Ubuntu:16.04:LTS linux-aws

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1054.63"}]}]

Ubuntu:16.04:LTS linux-azure

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.0-1018.21"}]}]

Ubuntu:16.04:LTS linux-gcp

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.0-1017.21"}]}]

Ubuntu:16.04:LTS linux-hwe

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.0-43.48~16.04.1"}]}]

Ubuntu:16.04:LTS linux-kvm

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1020.25"}]}]

Ubuntu:16.04:LTS linux-oem

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.0-1028.31"}]}]

Ubuntu:16.04:LTS linux-raspi2

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1086.94"}]}]

Ubuntu:16.04:LTS linux-snapdragon

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1088.93"}]}]

Ubuntu:Pro:FIPS-updates:16.04:LTS linux-fips

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1008.10"}]}]

Ubuntu:20.04:LTS linux-azure-fde