Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:19175
HistoryMay 16, 2019 - 2:50 a.m.

Information Disclosure

2019-05-1602:50:31
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14

EPSS

0

Percentile

10.1%

Linux kernel is vulnerable to information disclosure attacks. This is because the __netlink_deliver_tap_skb function in net/netlink/af_netlink.c does not restrict observations of Netlink messages to a single net namespace, when CONFIG_NLMON is enabled. This allows local users to obtain sensitive information by leveraging the CAP_NET_ADMIN capability.

References