atalk_create in net/appletalk/ddp.c in the AF_APPLETALK network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-6cc03e8aa36c.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jan 20, 2020 | Oct 1, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-debugUpgrade kernelUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-debug-devel | Dec 4, 2019 | Oct 1, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernelUpgrade perfUpgrade kernel-develUpgrade kernel-tools | Nov 19, 2019 | Oct 1, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel | Nov 19, 2019 | Oct 1, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade kernel-toolsUpgrade kernel-sourceUpgrade python-perfUpgrade perfUpgrade kernel-headersUpgrade kernel-develUpgrade python3-perf | Nov 28, 2019 | Oct 1, 2019 |
| Suse | — | Upgrade kernel-default | Nov 14, 2019 | Oct 1, 2019 |
| Ubuntu | — | Upgrade linux-image-kvmUpgrade linux-image-4.4.0-168-lowlatencyUpgrade linux-image-4.15.0-69-lowlatencyUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-1062-kvmUpgrade linux-image-4.4.0-168-powerpc64-embUpgrade linux-image-5.0.0-1025-azureUpgrade linux-image-5.0.0-1022-raspi2Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1049-gcpUpgrade linux-image-4.15.0-1054-awsUpgrade linux-image-powerpc64-embUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-69-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.0.0-1022-kvmUpgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-5.0.0-1021-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.0.0-1007-oracleUpgrade linux-image-4.15.0-69-generic-lpaeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-1050-kvmUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-5.0.0-35-lowlatencyUpgrade linux-image-5.0.0-35-genericUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-1098-awsUpgrade linux-image-oemUpgrade linux-image-gke-4.15Upgrade linux-image-4.15.0-1063-oemUpgrade linux-image-gke-5.0Upgrade linux-image-4.4.0-168-genericUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.15.0-1048-gkeUpgrade linux-image-4.15.0-1063-azureUpgrade linux-image-5.0.0-1025-gcpUpgrade linux-image-azureUpgrade linux-image-5.0.0-1027-oem-osp1Upgrade linux-image-4.4.0-168-powerpc-e500mcUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.4.0-168-powerpc-smpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-168-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-1058-awsUpgrade linux-image-oem-osp1Upgrade linux-image-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-5.0.0-1025-gkeUpgrade linux-image-4.15.0-1029-oracleUpgrade linux-image-4.4.0-168-powerpc64-smpUpgrade linux-image-genericUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.0.0-35-generic-lpaeUpgrade linux-image-powerpc-smpUpgrade linux-image-aws-lts-18.04 | Nov 14, 2019 | Oct 1, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 1, 2019 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub