CVE:CVE-2019-20367
CNNVD:CNNVD-202001-257
libbsd 0.10.0之前版本中的nlist.c文件存在缓冲区错误漏洞。本地攻击者可利用该漏洞获取敏感信息或导致应用程序崩溃。
solution:Upgrade freedesktop libbsd to a higher version than 0.10.0,and avoid the version (,0.10.0); Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,16.04,18.04,19.04,and avoid the version 12.04,14.04,16.04,18.04,19.04; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1