The ec_dev_ioctl function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2 does not require the CAP_NET_ADMIN capability, which allows local users to bypass intended access restrictions and configure econet addresses via an SIOCSIFADDR ioctl call.
CVSS Details
- CVSS 3.1 Base Score: 7.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-debug-baseUpgrade kernel-64k-pagesizeUpgrade kernel-traceUpgrade kernel-vmiUpgrade kernel-source-rtUpgrade kernel-vmi-baseUpgrade kernel-sourceUpgrade kernel-ec2-develUpgrade kernel-ec2-baseUpgrade kernel-desktop-baseUpgrade um-host-kernelUpgrade kernel-vanilla-develUpgrade kernel-rt_trace-baseUpgrade kernel-smpUpgrade kernel-ppc64Upgrade kernel-rt_trace-develUpgrade kernel-pseries64Upgrade kernel-s390-debugUpgrade kernel-pae-baseUpgrade kernel-ec2-extraUpgrade kernel-syms-rtUpgrade kernel-rt_traceUpgrade kernel-rtUpgrade kernel-vmi-develUpgrade kernel-desktop-develUpgrade preload-kmp-defaultUpgrade kernel-rt-baseUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade preload-kmp-desktopUpgrade kernel-s390xUpgrade um-host-install-initrdUpgrade kernel-ec2Upgrade kernel-xen-develUpgrade kernel-trace-baseUpgrade kernel-trace-develUpgrade kernel-umUpgrade kernel-pae-develUpgrade kernel-iseries64Upgrade kernel-source-vanillaUpgrade kernel-default-develUpgrade kernel-rt-develUpgrade xen-kmpUpgrade kernel-defaultUpgrade kernel-paeUpgrade kernel-pmac64Upgrade kernel-vanillaUpgrade kernel-bigsmpUpgrade kernel-s390x-debugUpgrade kernel-s390Upgrade kernel-debugUpgrade kernel-xenUpgrade kernel-xenpaeUpgrade kernel-symsUpgrade kernel-kdumpUpgrade kernel-debug-develUpgrade kernel-default-baseUpgrade kernel-desktopUpgrade kernel-sn2Upgrade ofed-kmp-rtUpgrade kernel-xen-baseUpgrade iscsitarget-kmp-rtUpgrade kernel-vanilla-baseUpgrade kernel-kdumppaeUpgrade kernel-develUpgrade brocade-bna-kmp-rtUpgrade kernel-vmipae | Feb 17, 2015 | Dec 30, 2010 |
| Ubuntu | — | Upgrade linux-image-2.6.15-55-server-bigironUpgrade linux-image-2.6.32-26-genericUpgrade linux-image-2.6.24-28-itaniumUpgrade linux-image-2.6.15-55-hppa64Upgrade linux-image-2.6.32-26-powerpc-smpUpgrade linux-image-2.6.32-216-doveUpgrade linux-image-2.6.24-28-serverUpgrade linux-image-2.6.24-28-lpiaUpgrade linux-image-2.6.24-28-mckinleyUpgrade linux-image-2.6.32-26-sparc64Upgrade linux-image-2.6.31-22-virtualUpgrade linux-image-2.6.24-28-openvzUpgrade linux-image-2.6.31-22-powerpc-smpUpgrade linux-image-2.6.15-55-sparc64-smpUpgrade linux-image-2.6.15-55-powerpcUpgrade linux-image-2.6.35-23-powerpcUpgrade linux-image-2.6.35-903-omap4Upgrade linux-image-2.6.24-28-powerpcUpgrade linux-image-2.6.31-22-386Upgrade linux-image-2.6.32-26-powerpcUpgrade linux-image-2.6.35-23-generic-paeUpgrade linux-image-2.6.35-23-versatileUpgrade linux-image-2.6.15-55-mckinley-smpUpgrade linux-image-2.6.24-28-sparc64Upgrade linux-image-2.6.24-28-rtUpgrade linux-image-2.6.15-55-amd64-xeonUpgrade linux-image-2.6.15-55-amd64-genericUpgrade linux-image-2.6.31-22-ia64Upgrade linux-image-2.6.32-310-ec2Upgrade linux-image-2.6.35-23-powerpc-smpUpgrade linux-image-2.6.32-416-doveUpgrade linux-image-2.6.32-26-versatileUpgrade linux-image-2.6.24-28-genericUpgrade linux-image-2.6.15-55-686Upgrade linux-image-2.6.32-26-sparc64-smpUpgrade linux-image-2.6.35-25-genericUpgrade linux-image-2.6.31-22-powerpcUpgrade linux-image-2.6.32-26-ia64Upgrade linux-image-2.6.32-26-386Upgrade linux-image-2.6.31-22-serverUpgrade linux-image-2.6.31-112-imx51Upgrade linux-image-2.6.15-55-amd64-serverUpgrade linux-image-2.6.15-55-itanium-smpUpgrade linux-image-2.6.15-55-k7Upgrade linux-image-2.6.32-26-preemptUpgrade linux-image-2.6.15-55-mckinleyUpgrade linux-image-2.6.32-26-generic-paeUpgrade linux-image-2.6.24-28-xenUpgrade linux-image-2.6.24-28-hppa64Upgrade linux-image-2.6.15-55-sparc64Upgrade linux-image-2.6.32-26-lpiaUpgrade linux-image-2.6.15-55-386Upgrade linux-image-2.6.32-26-serverUpgrade linux-image-2.6.24-28-lpiacompatUpgrade linux-image-2.6.35-23-powerpc64-smpUpgrade linux-image-2.6.24-28-sparc64-smpUpgrade linux-image-2.6.31-22-lpiaUpgrade linux-image-2.6.35-25-generic-paeUpgrade linux-image-2.6.15-55-hppa32-smpUpgrade linux-image-2.6.31-22-generic-paeUpgrade linux-image-2.6.15-55-powerpc64-smpUpgrade linux-image-2.6.35-23-serverUpgrade linux-image-2.6.24-28-hppa32Upgrade linux-image-2.6.31-608-imx51Upgrade linux-image-2.6.31-22-sparc64Upgrade linux-image-2.6.32-26-powerpc64-smpUpgrade linux-image-2.6.24-28-386Upgrade linux-image-2.6.24-28-virtualUpgrade linux-image-2.6.35-23-omapUpgrade linux-image-2.6.15-55-serverUpgrade linux-image-2.6.15-55-powerpc-smpUpgrade linux-image-2.6.35-23-genericUpgrade linux-image-2.6.31-22-genericUpgrade linux-image-2.6.24-28-powerpc64-smpUpgrade linux-image-2.6.35-25-virtualUpgrade linux-image-2.6.35-25-serverUpgrade linux-image-2.6.31-22-powerpc64-smpUpgrade linux-image-2.6.15-55-hppa32Upgrade linux-image-2.6.15-55-amd64-k8Upgrade linux-image-2.6.15-55-itaniumUpgrade linux-image-2.6.31-307-ec2Upgrade linux-image-2.6.35-23-virtualUpgrade linux-image-2.6.15-55-hppa64-smpUpgrade linux-image-2.6.24-28-powerpc-smpUpgrade linux-image-2.6.32-26-virtualUpgrade linux-image-2.6.31-22-sparc64-smp | Nov 8, 2024 | Dec 30, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub