Netlink Messages Spoofing

2019-05-0204:41:23

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

1.9 Low

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:M/Au:N/C:N/I:P/A:N

JSON

kernel-rt is vulnerable to message spoofing. A flaw was found in the way Netlink messages without SCM_CREDENTIALS (used for authentication) data set were handled. When not explicitly set, the data was sent but with all values set to 0, including the process ID and user ID, causing the Netlink message to appear as if it were sent with root privileges. A local, unprivileged user could use this flaw to send spoofed Netlink messages to an application, possibly resulting in the application performing privileged operations if it relied on SCM_CREDENTIALS data for the authentication of Netlink messages.

CPENameOperatorVersion
kernel-rteq3.0.18__rt34.53.el6rt
kernel-rteq3.0.36__rt57.66.el6rt
kernel-rteq3.0.30__rt50.62.el6rt
kernel-rteq2.6.33.9__rt31.79.el6rt
kernel-rteq3.2.23__rt37.56.el6rt
kernel-rteq3.0.9__rt26.46.el6rt
kernel-rteq2.6.33.9__rt31.66.el6rt
kernel-rteq2.6.33.9__rt31.74.el6rt
kernel-rteq3.0.9__rt26.45.el6rt
kernel-rteq3.0.25__rt44.57.el6rt

Name	Operator	Version
kernel-rt	eq	3.0.18__rt34.53.el6rt
kernel-rt	eq	3.0.36__rt57.66.el6rt
kernel-rt	eq	3.0.30__rt50.62.el6rt
kernel-rt	eq	2.6.33.9__rt31.79.el6rt
kernel-rt	eq	3.2.23__rt37.56.el6rt
kernel-rt	eq	3.0.9__rt26.46.el6rt
kernel-rt	eq	2.6.33.9__rt31.66.el6rt
kernel-rt	eq	2.6.33.9__rt31.74.el6rt
kernel-rt	eq	3.0.9__rt26.45.el6rt
kernel-rt	eq	3.0.25__rt44.57.el6rt