atalk_create in net/appletalk/ddp.c in the AF_APPLETALK network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-6cc03e8aa36c.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jan 20, 2020 | Oct 1, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-debugUpgrade kernel-develUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-debug-develUpgrade kernel-headers | Dec 4, 2019 | Oct 1, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-libs | Nov 19, 2019 | Oct 1, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel | Nov 19, 2019 | Oct 1, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-sourceUpgrade python-perfUpgrade kernel-develUpgrade python3-perfUpgrade perfUpgrade kernel-headers | Nov 28, 2019 | Oct 1, 2019 |
| Suse | — | Upgrade kernel-default | Nov 14, 2019 | Oct 1, 2019 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1098-awsUpgrade linux-image-5.0.0-1021-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-5.0.0-35-lowlatencyUpgrade linux-image-4.15.0-1050-kvmUpgrade linux-image-kvmUpgrade linux-image-virtualUpgrade linux-image-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-69-lowlatencyUpgrade linux-image-powerpc64-embUpgrade linux-image-5.0.0-1025-azureUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.0.0-35-genericUpgrade linux-image-5.0.0-1022-raspi2Upgrade linux-image-oemUpgrade linux-image-4.4.0-168-powerpc64-embUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-1062-kvmUpgrade linux-image-oracleUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.0.0-1007-oracleUpgrade linux-image-4.4.0-168-lowlatencyUpgrade linux-image-4.15.0-1054-awsUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-aws-hweUpgrade linux-image-4.15.0-69-genericUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-gke-4.15Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1049-gcpUpgrade linux-image-4.15.0-69-generic-lpaeUpgrade linux-image-5.0.0-1022-kvmUpgrade linux-image-powerpc-e500mcUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-powerpc-smpUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1058-awsUpgrade linux-image-powerpc64-smpUpgrade linux-image-oem-osp1Upgrade linux-image-5.0.0-1025-gkeUpgrade linux-image-4.15.0-1063-oemUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.0.0-1025-gcpUpgrade linux-image-4.15.0-1029-oracleUpgrade linux-image-4.4.0-168-powerpc-e500mcUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.0.0-1027-oem-osp1Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.0.0-35-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-genericUpgrade linux-image-4.4.0-168-powerpc64-smpUpgrade linux-image-raspi2Upgrade linux-image-aws-lts-18.04Upgrade linux-image-gkeUpgrade linux-image-4.4.0-168-powerpc-smpUpgrade linux-image-gke-5.0Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.4.0-168-generic-lpaeUpgrade linux-image-4.15.0-1063-azureUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-4.4.0-168-genericUpgrade linux-image-4.15.0-1048-gkeUpgrade linux-image-powerpc-smp-lts-xenial | Nov 14, 2019 | Oct 1, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 1, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub