CVE:CVE-2017-1000251
CNNVD:CNNVD-201709-480
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。
Linux kernel 3.3-rc1版本至4.13.1版本中的L2CAP配置响应处理存在栈溢出漏洞。远程攻击者可利用该漏洞执行代码。
solution:Upgrade linux linux_kernel to a higher version than 3.2.94,3.16.49,3.18.71,4.1.45,4.4.88,4.9.50,4.12.13,4.13.2,and avoid the version [2.6.32,3.2.94),[3.3,3.16.49),[3.17,3.18.71),[3.19,4.1.45),[4.2,4.4.88),[4.5,4.9.50),[4.10,4.12.13),[4.13,4.13.2); Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade nvidia jetson_tk1 to a higher version than r21,r24,and avoid the version r21,r24; Upgrade nvidia jetson_tx1 to a higher version than r21,r24,and avoid the version r21,r24; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 6.2,6.4,6.6,7.2,7.3,7.4,7.6,7.7,and avoid the version 6.2,6.4,6.6,7.2,7.3,7.4,7.6,7.7; Upgrade redhat enterprise_linux_server_eus to a higher version than 6.7,7.2,7.3,7.4,7.5,7.6,7.7,and avoid the version 6.7,7.2,7.3,7.4,7.5,7.6,7.7; Upgrade redhat enterprise_linux_server_tus to a higher version than 6.5,6.6,7.2,7.3,7.4,7.6,7.7,and avoid the version 6.5,6.6,7.2,7.3,7.4,7.6,7.7; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,7.0,and avoid the version 6.0,7.0