Attacker Value
Unknown
CVE-2017-15129
CVE-2017-15129
(Last updated February 08, 2024) ▾
MITRE ATT&CK
Log in to add MITRE ATT&CK tag
Add MITRE ATT&CK tactics and techniques that apply to this CVE.
Description
A use-after-free vulnerability was found in network namespaces code affecting the Linux kernel before 4.14.11. The function get_net_ns_by_id() in net/core/net_namespace.c does not check for the net::count value after it has found a peer network in netns_ids idr, which could lead to double free and memory corruption. This vulnerability could allow an unprivileged local user to induce kernel memory corruption on the system, leading to a crash. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although it is thought to be unlikely.
Add Assessment
No one has assessed this topic. Be the first to add your voice to the community.
CVSS V3 Severity and Metrics
Data provided by the National Vulnerability Database (NVD)
Base Score:
4.7 Medium
Impact Score:
3.6
Exploitability Score:
1
Attack Vector (AV):
Local
Attack Complexity (AC):
High
Privileges Required (PR):
Low
User Interaction (UI):
None
Scope (S):
Unchanged
Confidentiality (C):
None
Integrity (I):
None
Availability (A):
High
General Information
Vendors
- canonical,
- fedoraproject,
- linux,
- redhat
Products
- enterprise linux 7.0,
- enterprise linux compute node eus 7.4,
- enterprise linux desktop 7.0,
- enterprise linux eus 7.4,
- enterprise linux eus 7.6,
- enterprise linux eus 7.7,
- enterprise linux for ibm z systems 7.0,
- enterprise linux for ibm z systems eus 7.4,
- enterprise linux for power big endian 7.0,
- enterprise linux for power big endian eus 7.4,
- enterprise linux for power little endian eus 7.4,
- enterprise linux for real time 7.0,
- enterprise linux for real time for nfv 7,
- enterprise linux for scientific computing 7.0,
- enterprise linux server 7.0,
- enterprise linux server aus 7.4,
- enterprise linux server tus 7.4,
- enterprise linux server tus 7.6,
- enterprise linux server tus 7.7,
- enterprise linux server update services for sap solutions 7.4,
- enterprise linux workstation 7.0,
- fedora 27,
- linux kernel,
- linux kernel 4.15,
- ubuntu linux 14.04,
- ubuntu linux 16.04,
- ubuntu linux 17.10
References
Advisory
Miscellaneous
