Executive Summary

Informations
Name CVE-2017-15129 First vendor Publication 2018-01-09
Vendor Cve Last vendor Modification 2024-02-08

Security-Database Scoring CVSS v3

Cvss vector : CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Overall CVSS Score 4.7
Base Score 4.7 Environmental Score 4.7
impact SubScore 3.6 Temporal Score 4.7
Exploitabality Sub Score 1
 
Attack Vector Local Attack Complexity High
Privileges Required Low User Interaction None
Scope Unchanged Confidentiality Impact None
Integrity Impact None Availability Impact High
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:L/AC:L/Au:N/C:N/I:N/A:C)
Cvss Base Score 4.9 Attack Range Local
Cvss Impact Score 6.9 Attack Complexity Low
Cvss Expoit Score 3.9 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

A use-after-free vulnerability was found in network namespaces code affecting the Linux kernel before 4.14.11. The function get_net_ns_by_id() in net/core/net_namespace.c does not check for the net::count value after it has found a peer network in netns_ids idr, which could lead to double free and memory corruption. This vulnerability could allow an unprivileged local user to induce kernel memory corruption on the system, leading to a crash. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although it is thought to be unlikely.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15129

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-362 Race Condition

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 1
Os 3
Os 1
Os 2949
Os 1
Os 1
Os 1
Os 3
Os 1
Os 1
Os 1
Os 1
Os 1
Os 1
Os 1
Os 1
Os 1
Os 1
Os 3
Os 1
Os 1

Nessus® Vulnerability Scanner

Date Description
2018-09-18 Name : The remote EulerOS Virtualization host is missing multiple security updates.
File : EulerOS_SA-2018-1234.nasl - Type : ACT_GATHER_INFO
2018-04-27 Name : The remote CentOS host is missing one or more security updates.
File : centos_RHSA-2018-1062.nasl - Type : ACT_GATHER_INFO
2018-03-20 Name : The remote EulerOS host is missing multiple security updates.
File : EulerOS_SA-2018-1055.nasl - Type : ACT_GATHER_INFO
2018-01-16 Name : The remote Virtuozzo host is missing a security update.
File : Virtuozzo_VZA-2018-004.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

Source Url
BID http://www.securityfocus.com/bid/102485
MISC http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=21b...
http://seclists.org/oss-sec/2018/q1/7
https://access.redhat.com/security/cve/CVE-2017-15129
https://bugzilla.redhat.com/show_bug.cgi?id=1531174
https://github.com/torvalds/linux/commit/21b5944350052d2583e82dd59b19a9ba94a0...
https://marc.info/?l=linux-netdev&m=151370451121029&w=2
https://marc.info/?t=151370468900001&r=1&w=2
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.11
REDHAT https://access.redhat.com/errata/RHSA-2018:0654
https://access.redhat.com/errata/RHSA-2018:0676
https://access.redhat.com/errata/RHSA-2018:1062
https://access.redhat.com/errata/RHSA-2019:1946
UBUNTU https://usn.ubuntu.com/3617-1/
https://usn.ubuntu.com/3617-2/
https://usn.ubuntu.com/3617-3/
https://usn.ubuntu.com/3619-1/
https://usn.ubuntu.com/3619-2/
https://usn.ubuntu.com/3632-1/

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
Date Informations
2024-03-12 12:41:20
  • Multiple Updates
2024-02-08 09:28:11
  • Multiple Updates
2024-02-02 01:44:49
  • Multiple Updates
2024-02-01 12:12:33
  • Multiple Updates
2023-12-29 01:39:52
  • Multiple Updates
2023-11-22 01:39:30
  • Multiple Updates
2023-09-05 12:42:50
  • Multiple Updates
2023-09-05 01:12:17
  • Multiple Updates
2023-09-02 12:42:33
  • Multiple Updates
2023-09-02 01:12:34
  • Multiple Updates
2023-08-12 12:46:03
  • Multiple Updates
2023-08-12 01:12:03
  • Multiple Updates
2023-08-11 12:40:39
  • Multiple Updates
2023-08-11 01:12:23
  • Multiple Updates
2023-08-06 12:39:19
  • Multiple Updates
2023-08-06 01:12:02
  • Multiple Updates
2023-08-04 12:39:29
  • Multiple Updates
2023-08-04 01:12:06
  • Multiple Updates
2023-07-14 12:39:31
  • Multiple Updates
2023-07-14 01:12:05
  • Multiple Updates
2023-06-06 12:34:41
  • Multiple Updates
2023-03-29 01:41:15
  • Multiple Updates
2023-03-28 12:12:23
  • Multiple Updates
2023-02-13 05:27:49
  • Multiple Updates
2023-02-02 21:28:06
  • Multiple Updates
2023-01-25 01:32:31
  • Multiple Updates
2022-10-11 12:35:15
  • Multiple Updates
2022-10-11 01:11:59
  • Multiple Updates
2022-09-09 01:31:17
  • Multiple Updates
2022-03-11 01:28:47
  • Multiple Updates
2022-02-01 01:27:38
  • Multiple Updates
2021-12-11 12:28:13
  • Multiple Updates
2021-12-11 01:26:32
  • Multiple Updates
2021-08-19 12:24:21
  • Multiple Updates
2021-05-25 12:23:11
  • Multiple Updates
2021-05-04 12:58:10
  • Multiple Updates
2021-04-22 02:09:56
  • Multiple Updates
2021-03-27 01:20:42
  • Multiple Updates
2020-12-12 12:18:11
  • Multiple Updates
2020-12-05 12:19:28
  • Multiple Updates
2020-09-25 01:17:32
  • Multiple Updates
2020-08-11 12:17:39
  • Multiple Updates
2020-08-08 01:17:35
  • Multiple Updates
2020-08-07 12:17:51
  • Multiple Updates
2020-08-07 01:18:32
  • Multiple Updates
2020-08-01 12:17:32
  • Multiple Updates
2020-07-30 01:18:14
  • Multiple Updates
2020-05-24 01:20:44
  • Multiple Updates
2020-05-23 02:03:20
  • Multiple Updates
2020-05-23 00:56:22
  • Multiple Updates
2019-09-12 12:08:58
  • Multiple Updates
2019-07-31 12:09:02
  • Multiple Updates
2019-07-03 12:08:31
  • Multiple Updates
2019-06-15 12:08:52
  • Multiple Updates
2019-03-16 12:07:50
  • Multiple Updates
2018-12-18 12:07:29
  • Multiple Updates
2018-12-15 12:07:30
  • Multiple Updates
2018-11-20 12:07:41
  • Multiple Updates
2018-11-08 12:08:04
  • Multiple Updates
2018-10-30 12:10:06
  • Multiple Updates
2018-07-13 12:08:17
  • Multiple Updates
2018-05-04 09:19:05
  • Multiple Updates
2018-04-25 09:19:17
  • Multiple Updates
2018-04-12 09:18:52
  • Multiple Updates
2018-04-11 09:19:16
  • Multiple Updates
2018-04-07 09:19:34
  • Multiple Updates
2018-04-06 09:19:10
  • Multiple Updates
2018-04-05 09:19:41
  • Multiple Updates
2018-03-28 12:08:18
  • Multiple Updates
2018-02-02 21:20:45
  • Multiple Updates
2018-01-10 13:23:35
  • First insertion