The ec_dev_ioctl function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2 does not require the CAP_NET_ADMIN capability, which allows local users to bypass intended access restrictions and configure econet addresses via an SIOCSIFADDR ioctl call.
CVSS Details
- CVSS 3.1 Base Score: 7.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-smpUpgrade kernel-rt_trace-develUpgrade kernel-ec2-extraUpgrade kernel-ec2-baseUpgrade kernel-ppc64Upgrade kernel-vmiUpgrade kernel-ec2-develUpgrade kernel-sourceUpgrade kernel-debug-baseUpgrade kernel-s390xUpgrade kernel-rtUpgrade kernel-vmi-develUpgrade kernel-rt_traceUpgrade um-host-kernelUpgrade preload-kmp-defaultUpgrade kernel-vmi-baseUpgrade kernel-desktop-baseUpgrade kernel-vanilla-develUpgrade kernel-desktop-develUpgrade kernel-pae-baseUpgrade kernel-rt-baseUpgrade preload-kmp-desktopUpgrade kernel-source-rtUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade kernel-rt_trace-baseUpgrade kernel-syms-rtUpgrade kernel-pseries64Upgrade kernel-traceUpgrade kernel-s390-debugUpgrade kernel-64k-pagesizeUpgrade kernel-s390Upgrade kernel-vmipaeUpgrade kernel-rt-develUpgrade kernel-xenUpgrade kernel-ec2Upgrade kernel-iseries64Upgrade kernel-vanillaUpgrade kernel-s390x-debugUpgrade um-host-install-initrdUpgrade kernel-umUpgrade kernel-defaultUpgrade kernel-pae-develUpgrade kernel-trace-develUpgrade ofed-kmp-rtUpgrade kernel-symsUpgrade kernel-sn2Upgrade kernel-kdumpUpgrade kernel-develUpgrade kernel-paeUpgrade kernel-vanilla-baseUpgrade kernel-trace-baseUpgrade brocade-bna-kmp-rtUpgrade kernel-pmac64Upgrade xen-kmpUpgrade kernel-desktopUpgrade kernel-source-vanillaUpgrade kernel-debugUpgrade kernel-bigsmpUpgrade iscsitarget-kmp-rtUpgrade kernel-xen-develUpgrade kernel-kdumppaeUpgrade kernel-default-develUpgrade kernel-xenpaeUpgrade kernel-xen-baseUpgrade kernel-default-baseUpgrade kernel-debug-devel | Feb 17, 2015 | Dec 30, 2010 |
| Ubuntu | — | Upgrade linux-image-2.6.32-26-sparc64Upgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.32-26-powerpcUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.24-28-sparc64Upgrade linux-image-2.6.32-310-ec2Upgrade linux-image-2.6.32-26-powerpc-smpUpgrade linux-image-2.6.32-26-versatileUpgrade linux-image-2.6.24-28-genericUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.35-23-generic-paeUpgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.24-28-rtUpgrade linux-image-2.6.35-23-versatileUpgrade linux-image-2.6.32-26-sparc64-smpUpgrade linux-image-2.6.24-28-itaniumUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.32-26-genericUpgrade linux-image-2.6.35-23-powerpcUpgrade linux-image-2.6.35-25-genericUpgrade linux-image-2.6.24-28-serverUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.24-28-openvzUpgrade linux-image-2.6.24-28-mckinleyUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.24-28-lpiaUpgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.24-28-powerpcUpgrade linux-image-2.6.35-23-powerpc-smpUpgrade linux-image-2.6.32-26-ia64Upgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.31-112-imx51Upgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.24-28-lpiacompatUpgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.32-26-preemptUpgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.35-25-generic-paeUpgrade linux-image-2.6.32-26-virtualUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.32-26-serverUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.35-23-virtualUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.24-28-powerpc-smpUpgrade linux-image-2.6.32-26-powerpc64-smpUpgrade linux-image-2.6.31-608-imx51Upgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.35-23-genericUpgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.24-28-386Upgrade linux-image-2.6.35-23-omapUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.24-28-virtualUpgrade linux-image-2.6.35-25-virtualUpgrade linux-image-2.6.35-25-serverUpgrade linux-image-2.6.24-28-powerpc64-smpUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.35-23-powerpc64-smpUpgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.32-26-generic-paeUpgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.35-23-serverUpgrade linux-image-2.6.31-22-sparc64-smpUpgrade linux-image-2.6.24-28-xenUpgrade linux-image-2.6.24-28-hppa32Upgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.24-28-hppa64Upgrade linux-image-2.6.32-26-386Upgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.32-26-lpiaUpgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.24-28-sparc64-smp | Nov 8, 2024 | Dec 30, 2010 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub