2017-10-16 12:31:07 -04:00
{
2019-03-17 23:03:59 +00:00
"CVE_data_meta" : {
"ASSIGNER" : "secalert@redhat.com" ,
"ID" : "CVE-2017-15129" ,
"STATE" : "PUBLIC"
} ,
"affects" : {
"vendor" : {
"vendor_data" : [
{
"product" : {
"product_data" : [
{
"product_name" : "Linux kernel v4.0-rc1 through v4.15-rc5" ,
"version" : {
"version_data" : [
{
"version_value" : "Linux kernel v4.0-rc1 through v4.15-rc5"
}
]
}
}
]
} ,
"vendor_name" : "n/a"
}
2018-01-09 14:05:06 -05:00
]
2019-03-17 23:03:59 +00:00
}
} ,
"data_format" : "MITRE" ,
"data_type" : "CVE" ,
"data_version" : "4.0" ,
"description" : {
"description_data" : [
{
"lang" : "eng" ,
"value" : "A use-after-free vulnerability was found in network namespaces code affecting the Linux kernel before 4.14.11. The function get_net_ns_by_id() in net/core/net_namespace.c does not check for the net::count value after it has found a peer network in netns_ids idr, which could lead to double free and memory corruption. This vulnerability could allow an unprivileged local user to induce kernel memory corruption on the system, leading to a crash. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although it is thought to be unlikely."
}
]
} ,
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng" ,
"value" : "CWE-362"
}
]
}
]
} ,
"references" : {
"reference_data" : [
{
"name" : "USN-3617-1" ,
"refsource" : "UBUNTU" ,
"url" : "https://usn.ubuntu.com/3617-1/"
} ,
{
"name" : "USN-3619-2" ,
"refsource" : "UBUNTU" ,
"url" : "https://usn.ubuntu.com/3619-2/"
} ,
{
"name" : "USN-3617-3" ,
"refsource" : "UBUNTU" ,
"url" : "https://usn.ubuntu.com/3617-3/"
} ,
{
"name" : "https://marc.info/?l=linux-netdev&m=151370451121029&w=2" ,
"refsource" : "MISC" ,
"url" : "https://marc.info/?l=linux-netdev&m=151370451121029&w=2"
} ,
{
"name" : "https://marc.info/?t=151370468900001&r=1&w=2" ,
"refsource" : "MISC" ,
"url" : "https://marc.info/?t=151370468900001&r=1&w=2"
} ,
{
"name" : "USN-3632-1" ,
"refsource" : "UBUNTU" ,
"url" : "https://usn.ubuntu.com/3632-1/"
} ,
{
"name" : "https://bugzilla.redhat.com/show_bug.cgi?id=1531174" ,
"refsource" : "MISC" ,
"url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1531174"
} ,
{
"name" : "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.11" ,
"refsource" : "MISC" ,
"url" : "https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.11"
} ,
{
"name" : "https://github.com/torvalds/linux/commit/21b5944350052d2583e82dd59b19a9ba94a007f0" ,
"refsource" : "MISC" ,
"url" : "https://github.com/torvalds/linux/commit/21b5944350052d2583e82dd59b19a9ba94a007f0"
} ,
{
"name" : "RHSA-2018:1062" ,
"refsource" : "REDHAT" ,
"url" : "https://access.redhat.com/errata/RHSA-2018:1062"
} ,
{
"name" : "RHSA-2018:0654" ,
"refsource" : "REDHAT" ,
"url" : "https://access.redhat.com/errata/RHSA-2018:0654"
} ,
{
"name" : "https://access.redhat.com/security/cve/CVE-2017-15129" ,
"refsource" : "MISC" ,
"url" : "https://access.redhat.com/security/cve/CVE-2017-15129"
} ,
{
"name" : "102485" ,
"refsource" : "BID" ,
"url" : "http://www.securityfocus.com/bid/102485"
} ,
{
"name" : "http://seclists.org/oss-sec/2018/q1/7" ,
"refsource" : "MISC" ,
"url" : "http://seclists.org/oss-sec/2018/q1/7"
} ,
{
"name" : "RHSA-2018:0676" ,
"refsource" : "REDHAT" ,
"url" : "https://access.redhat.com/errata/RHSA-2018:0676"
} ,
{
"name" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=21b5944350052d2583e82dd59b19a9ba94a007f0" ,
"refsource" : "MISC" ,
"url" : "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=21b5944350052d2583e82dd59b19a9ba94a007f0"
} ,
{
"name" : "USN-3617-2" ,
"refsource" : "UBUNTU" ,
"url" : "https://usn.ubuntu.com/3617-2/"
} ,
{
"name" : "USN-3619-1" ,
"refsource" : "UBUNTU" ,
"url" : "https://usn.ubuntu.com/3619-1/"
}
]
}
}
