CVE:CVE-2017-1000410
CNNVD:CNNVD-201712-212
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。
Linux kernel 3.3-rc1及之后的版本中的L2CAP命令处理存在信息泄露漏洞。攻击者可利用该漏洞获取未初始化的栈变量，并控制未初始化栈变量中的数据，绕过KASLR和栈金丝雀保护。
solution:Upgrade linux linux_kernel to a higher version than 4.15,4.15:rc1,4.15:rc2,4.15:rc3,4.15:rc4,4.15:rc5,4.15:rc6,4.15:rc7,and avoid the version (3.2,4.15),4.15:rc1,4.15:rc2,4.15:rc3,4.15:rc4,4.15:rc5,4.15:rc6,4.15:rc7; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade redhat virtualization_host to a higher version than 4.0,and avoid the version 4.0; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.6,and avoid the version 7.6; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.4,7.6,and avoid the version 7.4,7.6; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.4,7.6,and avoid the version 7.4,7.6; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,7.0,and avoid the version 6.0,7.0