CVE:CVE-2016-2090
CNNVD:CNNVD-201602-064
libbsd是一个提供了用于BSD系统中的常用功能的库。
libbsd 0.8.2之前的版本中的‘fgetwln’函数存在安全漏洞。攻击者可利用该漏洞造成基于堆的缓冲区溢出。
solution:Upgrade fedoraproject fedora to a higher version than 24,25,and avoid the version 24,25; Upgrade freedesktop libbsd to a higher version than 0.8.2,and avoid the version (,0.8.2); Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,16.04,18.04,19.04,and avoid the version 12.04,14.04,16.04,18.04,19.04