Summary
It was discovered that IPRoute incorrectly handled certain inputs.
An attacker could possibly use this issue to execute arbitrary code.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | iproute2 | 4.15.0-2ubuntu1.1 |
Vulnerabilities 1
-
Unscored —
iproute2 before 5.1.0 has a use-after-free in get_netnsid_from_name in ip/ipnetns.c. NOTE: security relevance may be li…
References
-
report
https://ubuntu.com/security/CVE-2019-20795