An elevation of privilege vulnerability in the libnl library could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32255299.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:3207-1 advisory.

  - An elevation of privilege vulnerability in the libnl library could enable a local malicious application to     execute arbitrary code within the context of a privileged process. This issue is rated as High because it     could be used to gain local access to elevated capabilities, which are not normally accessible to a third-     party application. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32255299.
    (CVE-2017-0386)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:3208-1 advisory.

  - An elevation of privilege vulnerability in the libnl library could enable a local malicious application to     execute arbitrary code within the context of a privileged process. This issue is rated as High because it     could be used to gain local access to elevated capabilities, which are not normally accessible to a third-     party application. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32255299.
    (CVE-2017-0386)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

check valid input arguments for nla_reserve() (rh #1414305, CVE-2017-0386)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update with patches from upstream

  - check valid input arguments for nla_reserve() (rh     #1414305, CVE-2017-0386)

  - fix crash during SRIOV parsing

  - lazyly read psched settings

  - use O_CLOEXEC when creating file descriptors with     fopen()

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
164933	SUSE SLES12 Security Update : libnl-1_1 (SUSE-SU-2022:3207-1)	Nessus	SuSE Local Security Checks	high
164932	SUSE SLES12 Security Update : libnl3 (SUSE-SU-2022:3208-1)	Nessus	SuSE Local Security Checks	high
96675	Fedora 24 : libnl3 (2017-1423c7b4b0)	Nessus	Fedora Local Security Checks	high
96672	Fedora 25 : libnl3 (2017-090a9c11db)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2017-0386

high

Tenable Plugins

high

high

high

high