Router Linux kernel vulnerability

[coxhaus]

I came across this and thought I would post this. I am not a kernel guy but if you are still running one of these kernels in the link you need to find a new firmware or another router.

https://nvd.nist.gov/vuln/detail/CVE-2017-18017

Cisco released patches for this last fall.

 

[coxhaus]

Here is a more recent one.

https://www.bleepingcomputer.com/ne...ux-docker-image-leaves-root-account-unlocked/

 

[RMerlin]

I came across this and thought I would post this. I am not a kernel guy but if you are still running one of these kernels in the link you need to find a new firmware or another router.

https://nvd.nist.gov/vuln/detail/CVE-2017-18017

Cisco released patches for this last fall.

That CVE is from 2017 tho, so it's not exactly something new.

 

[coxhaus]

That CVE is from 2017 tho, so it's not exactly something new.

NVD Last Modified:
11/30/2018

I saw Cisco patches last fall after November.

The bleepingcomputer report is this month.
https://talosintelligence.com/vulnerability_reports/TALOS-2019-0782

 

[RMerlin]

NVD Last Modified:
11/30/2018

I saw Cisco patches last fall after November.

The bleepingcomputer report is this month.
https://talosintelligence.com/vulnerability_reports/TALOS-2019-0782

That report has nothing to do with the CVE from the original reporter... That report is about a password entry that was left blank in a docker image (CVE-2019-5021), while the original post was about a kernel issue (CVE-2017-18017).

 

[coxhaus]

You are right, I am mixing up my posts.

 

[coxhaus]

Check this out.

https://www.bleepingcomputer.com/ne...r-to-508-vulnerable-to-remote-code-execution/

 

[RMerlin]

Check this out.

https://www.bleepingcomputer.com/ne...r-to-508-vulnerable-to-remote-code-execution/

Only seems to target very recent kernels. I can't find that vulnerable section of code in 4.1, which is the newest kernel I work with atm.

It also targets RDS specifically, which I doubt any router uses (at least none that I have seen).