CVE-2019-20795
Description
iproute2 before 5.1.0 has a use-after-free in get_netnsid_from_name in ip/ipnetns.c. NOTE: security relevance may be limited to certain uses of setuid that, although not a default, are sometimes a configuration option offered to end users. Even when setuid is used, other factors (such as C library configuration) may block exploitability.
Risk Information
Base Score
4.4
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.03
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| networking and traffic control tools (USN-4357-1) iproute2_4.15.0-2ubuntu1.1_i386.deb | Linux |
| networking and traffic control tools (USN-4357-1) iproute2_4.15.0-2ubuntu1.1_amd64.deb | Linux |
| SUSE-SU-2021:3452-1(SUSE Linux Enterprise Server 12-SP5 ) iproute2-4.12-16.6.1.x86_64.rpm | Linux |
| SUSE-SU-2021:3452-1(SUSE Linux Enterprise Server 12-SP5 ) iproute2-debuginfo-4.12-16.6.1.x86_64.rpm | Linux |
| SUSE-SU-2021:3452-1(SUSE Linux Enterprise Server 12-SP5 ) iproute2-debugsource-4.12-16.6.1.x86_64.rpm | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234