CVE-2019-17052: Low severity Linux Linux kernel vulnerability
ax25create in net/ax25/afax25.c in the AFAX25 network module in the Linux kernel 3.16 through 5.3.2 does not enforce CAPNETRAW, which means that unprivileged users can create a raw socket, aka CID-0614e2b73768.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.262-1Fixed in 6.1.176-1Fixed in 6.1.180-1Fixed in 6.12.94-1Fixed in 6.12.101-1Fixed in 7.1.7-1Fixed in 7.1.8-1 - Upgrade
Upgrade
Linux kernel (AF_AX25)to a version that resolves this vulnerability.Fixed in 5.3.2 - Compensating control
Enforce CAP_NET_RAW for raw socket creation for the AF_AX25 network module (net/ax25/af_ax25.c) so that unprivileged users cannot create raw sockets.
Event History
Frequently Asked Questions
What is the severity of CVE-2019-17052?
CVE-2019-17052 is considered a medium severity vulnerability due to the potential for unprivileged users to create raw sockets.
How do I fix CVE-2019-17052?
To fix CVE-2019-17052, update your Linux kernel to version 5.10.223-1, 5.10.226-1 or later.
Which Linux kernel versions are affected by CVE-2019-17052?
CVE-2019-17052 affects Linux kernel versions from 3.16 up to 5.3.2.
What is the impact of CVE-2019-17052 on system security?
CVE-2019-17052 allows unprivileged users to create raw sockets, potentially leading to network abuse or system compromise.
Is CVE-2019-17052 specific to certain Linux distributions?
CVE-2019-17052 impacts multiple distributions, including Debian 8.0, Fedora 29, and several versions of Ubuntu.