CVE-2017-17449
- State
- Published
- Severity
- Not scored
- Published
- Dec 7, 2017
- Updated
- Aug 5, 2024
- Reserved
- Dec 6, 2017
Description
The __netlink_deliver_tap_skb function in net/netlink/af_netlink.c in the Linux kernel through 4.14.4, when CONFIG_NLMON is enabled, does not restrict observations of Netlink messages to a single net namespace, which allows local users to obtain sensitive information by leveraging the CAP_NET_ADMIN capability to sniff an nlmon interface for all Netlink activity on the system.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- USN-3619-2vendor-advisory
- DSA-4082vendor-advisory
- https://lkml.org/lkml/2017/12/5/950
- 102122vdb-entry
- RHSA-2018:1062vendor-advisory
- https://source.android.com/security/bulletin/pixel/2018-04-01
- RHSA-2018:0654vendor-advisory
- RHSA-2018:0676vendor-advisory
- USN-3653-2vendor-advisory
- USN-3655-1vendor-advisory
- RHSA-2018:1170vendor-advisory
- RHSA-2018:1130vendor-advisory
- DSA-4073vendor-advisory
- USN-3655-2vendor-advisory
- USN-3653-1vendor-advisory
- USN-3657-1vendor-advisory
- USN-3619-1vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.