CVE:CVE-2017-17806
CNNVD:CNNVD-201712-753
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。
Linux kernel 4.14.8之前的版本中的HMAC实现存在缓冲区溢出漏洞。本地攻击者可通过执行一系列特制的系统调用利用该漏洞执行代码或造成拒绝服务。
solution:Upgrade linux linux_kernel to a higher version than 3.2.97,3.16.52,3.18.89,4.1.49,4.4.107,4.9.71,4.14.8,and avoid the version (,3.2.97),[3.3,3.16.52),[3.17,3.18.89),[3.19,4.1.49),[4.2,4.4.107),[4.5,4.9.71),[4.10,4.14.8); Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade opensuse leap to a higher version than 42.2,and avoid the version 42.2; Upgrade opensuse_project leap to a higher version than 42.3,and avoid the version 42.3; Upgrade suse linux_enterprise_desktop to a higher version than 12:sp2,12:sp3,and avoid the version 12:sp2,12:sp3; Upgrade suse linux_enterprise_server to a higher version than 11:extra,11:sp4,12:sp2,12:sp3,and avoid the version 11:extra,11:sp4,12:sp2,12:sp3; Upgrade suse linux_enterprise_server_for_raspberry_pi to a higher version than 12:sp2,and avoid the version 12:sp2; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,16.04,17.10,and avoid the version 12.04,14.04,16.04,17.10