4 matches found
The vulnerability of the ax25_create function in the net/ax25/af_ax25.c module of the AF_AX25 kernel of the Linux operating system, related to default access rights settings, allows an attacker to compromise data integrity.
The vulnerability of the ax25create function in the net/ax25/afax25.c module of the AFAX25 kernel of the Linux operating system is related to a lack of mechanisms for standard permissions. Exploiting this vulnerability allows an attacker to compromise data integrity...
CVE-2019-17052
ax25create in net/ax25/afax25.c in the AFAX25 network module in the Linux kernel 3.16 through 5.3.2 does not enforce CAPNETRAW, which means that unprivileged users can create a raw socket, aka CID-0614e2b73768...
CVE-2019-17052
ax25create in net/ax25/afax25.c in the AFAX25 network module in the Linux kernel 3.16 through 5.3.2 does not enforce CAPNETRAW, which means that unprivileged users can create a raw socket, aka CID-0614e2b73768...
CVE-2019-17052
CVE-2019-17052 affects Linux kernel 3.16–5.3.2 where several AF_NET_RAW-bound protocols (AX.25) do not enforce CAP_NET_RAW in socket creation, allowing unprivileged users to create raw sockets. Related entries mention additional interfaces (IEEE802.154, Appletalk, ISDN, NFC) with the same CAP_NET...