CVE-2019-17054: Low severity Linux Linux kernel vulnerability
atalkcreate in net/appletalk/ddp.c in the AFAPPLETALK network module in the Linux kernel through 5.3.2 does not enforce CAPNETRAW, which means that unprivileged users can create a raw socket, aka CID-6cc03e8aa36c.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.187-1Fixed in 6.12.107-1Fixed in 6.12.111-1Fixed in 7.2.9-1Fixed in 7.2.10-1
Event History
Frequently Asked Questions
What is the severity of CVE-2019-17054?
CVE-2019-17054 is classified as a medium-severity vulnerability due to its potential for unprivileged users to create raw sockets.
How do I fix CVE-2019-17054?
To address CVE-2019-17054, upgrade your Linux kernel to version 5.10.223-1, 5.10.226-1, 6.1.119-1, 6.1.123-1, 6.12.11-1, or 6.12.12-1.
What systems are affected by CVE-2019-17054?
CVE-2019-17054 affects Linux kernel versions up to 5.3.2, specifically impacting systems that use the AF_APPLETALK network module.
Is CVE-2019-17054 exploitable remotely?
CVE-2019-17054 is not known to be directly exploitable remotely as it requires local access for the creation of raw sockets.
What does CVE-2019-17054 allow an attacker to do?
CVE-2019-17054 allows unprivileged users to create raw sockets, which can potentially facilitate further attacks through network packet manipulation.