正文

Linux kernel 缓冲区错误漏洞

admin
admin V管理员 /0 评论 /10 阅读
0223
此篇文章发布距今已超过1221天，您需要注意文章的内容或图片是否可用！

漏洞信息详情

Linux kernel 缓冲区错误漏洞

  • CNNVD编号：CNNVD-201909-887
    • <!--
  • 危害等级： 高危-->
  • 危害等级： 高危
  • CVE编号： CVE-2019-14821
  • 漏洞类型： 缓冲区错误
  • 发布时间： 2019-09-18
  • 威胁类型： 本地
  • 更新时间： 2021-06-03
  • 厂        商：
  • 漏洞来源： Debian,Red Hat

漏洞简介

Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。KVM是其中的一个基于内核的虚拟机。

Linux kernel 5.3及之前版本中的KVM虚拟机监视器的实现存在安全漏洞。攻击者可利用该漏洞造成主机内核崩溃，导致拒绝服务或可能提升权限。

漏洞公告

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：

https://git.kernel.org/pub/scm/virt/kvm/kvm.git/commit/?id=b60fe990c6b07ef6d4df67bc0530c7c90a62623a

参考网址

来源:MLIST

链接:http://www.openwall.com/lists/oss-security/2019/09/20/1

来源:UBUNTU

链接:https://usn.ubuntu.com/4163-2/

来源:DEBIAN

链接:https://www.debian.org/security/2019/dsa-4531

来源:CONFIRM

链接:https://security.netapp.com/advisory/ntap-20191004-0001/

来源:UBUNTU

链接:https://usn.ubuntu.com/4162-1/

来源:CONFIRM

链接:https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14821

来源:N/A

链接:https://www.oracle.com/security-alerts/cpuapr2020.html

来源:REDHAT

链接:https://access.redhat.com/errata/RHSA-2019:3309

来源:MISC

链接:https://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html

来源:SUSE

链接:http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00036.html

来源:REDHAT

链接:https://access.redhat.com/errata/RHSA-2020:0204

来源:UBUNTU

链接:https://usn.ubuntu.com/4157-1/

来源:REDHAT

链接:https://access.redhat.com/errata/RHSA-2020:0027

来源:MLIST

链接:https://lists.debian.org/debian-lts-announce/2019/09/msg00025.html

来源:MLIST

链接:https://lists.debian.org/debian-lts-announce/2019/10/msg00000.html

来源:UBUNTU

链接:https://usn.ubuntu.com/4163-1/

来源:UBUNTU

链接:https://usn.ubuntu.com/4162-2/

来源:MISC

链接:https://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html

来源:REDHAT

链接:https://access.redhat.com/errata/RHSA-2019:3978

来源:REDHAT

链接:https://access.redhat.com/errata/RHSA-2019:3517

来源:REDHAT

链接:https://access.redhat.com/errata/RHSA-2019:3979

来源:BUGTRAQ

链接:https://seclists.org/bugtraq/2019/Nov/11

来源:REDHAT

链接:https://access.redhat.com/errata/RHSA-2019:4256

来源:SUSE

链接:http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00037.html

来源:FEDORA

链接:https://lists.fedoraproject.org/archives/list/[email protected]/message/TRZQQQANZWQMPILZV7OTS3RGGRLLE2Q7/

来源:REDHAT

链接:https://access.redhat.com/errata/RHSA-2019:4154

来源:BUGTRAQ

链接:https://seclists.org/bugtraq/2019/Sep/41

来源:UBUNTU

链接:https://usn.ubuntu.com/4157-2/

来源:FEDORA

链接:https://lists.fedoraproject.org/archives/list/[email protected]/message/YW3QNMPENPFEGVTOFPSNOBL7JEIJS25P/

来源:www.suse.com

链接:https://www.suse.com/support/update/announcement/2019/suse-su-20193294-1.html

来源:www.suse.com

链接:https://www.suse.com/support/update/announcement/2019/suse-su-20193295-1.html

来源:lists.debian.org

链接:https://lists.debian.org/debian-lts-announce/2019/10/msg00000.html

来源:www.suse.com

链接:https://www.suse.com/support/update/announcement/2019/suse-su-20192984-1.html

来源:access.redhat.com

链接:https://access.redhat.com/errata/RHSA-2019:4168

来源:access.redhat.com

链接:https://access.redhat.com/errata/RHSA-2019:4164

来源:access.redhat.com

链接:https://access.redhat.com/errata/RHSA-2019:4159

来源:access.redhat.com

链接:https://access.redhat.com/errata/RHSA-2019:4154

来源:www.suse.com

链接:https://www.suse.com/support/update/announcement/2019/suse-su-20192953-1.html

来源:www.suse.com

链接:https://www.suse.com/support/update/announcement/2019/suse-su-20192952-1.html

来源:www.suse.com

链接:https://www.suse.com/support/update/announcement/2019/suse-su-20192951-1.html

来源:www.suse.com

链接:https://www.suse.com/support/update/announcement/2019/suse-su-20192950-1.html

来源:www.suse.com

链接:https://www.suse.com/support/update/announcement/2019/suse-su-20192949-1.html

来源:www.suse.com

链接:https://www.suse.com/support/update/announcement/2019/suse-su-20192948-1.html

来源:www.suse.com

链接:https://www.suse.com/support/update/announcement/2019/suse-su-20192947-1.html

来源:www.suse.com

链接:https://www.suse.com/support/update/announcement/2019/suse-su-20192946-1.html

来源:www.suse.com

链接:https://www.suse.com/support/update/announcement/2019/suse-su-20192648-1.html

来源:www.suse.com

链接:https://www.suse.com/support/update/announcement/2020/suse-su-20200093-1.html

来源:www.debian.org

链接:https://www.debian.org/security/2019/dsa-4531

来源:www.suse.com

链接:https://www.suse.com/support/update/announcement/2019/suse-su-201914218-1.html

来源:access.redhat.com

链接:https://access.redhat.com/errata/RHSA-2019:4255

来源:access.redhat.com

链接:https://access.redhat.com/errata/RHSA-2019:4256

来源:www.intel.com

链接:https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00237.html

来源:www.suse.com

链接:https://www.suse.com/support/update/announcement/2019/suse-su-20193200-1.html

来源:access.redhat.com

链接:https://access.redhat.com/errata/RHSA-2020:0027

来源:access.redhat.com

链接:https://access.redhat.com/errata/RHSA-2020:0204

来源:access.redhat.com

链接:https://access.redhat.com/errata/RHSA-2019:3978

来源:access.redhat.com

链接:https://access.redhat.com/errata/RHSA-2019:3979

来源:access.redhat.com

链接:https://access.redhat.com/security/cve/cve-2019-14821

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/155707/Red-Hat-Security-Advisory-2019-4256-01.html

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.0050/

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-publicly-disclosed-vulnerabilities-from-kernel-affect-ibm-netezza-host-management-2/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2019.4346/

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-ibm-security-guardium-is-affected-by-kernel-vulnerabilities-2/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2019.4252/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2019.4584/

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/158347/Red-Hat-Security-Advisory-2020-2851-01.html

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2019.4485/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2019.3613/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2019.3817/

来源:nvd.nist.gov

链接:https://nvd.nist.gov/vuln/detail/CVE-2019-14821

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2019.3691/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2019.4608/

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/154606/Debian-Security-Advisory-4531-1.html

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2019.4676/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2019.4698/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2019.4261/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.0141/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.0262/

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-ibm-security-guardium-is-affected-by-kernel-vulnerabilities-3/

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/156058/Red-Hat-Security-Advisory-2020-0204-01.html

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/155471/Red-Hat-Security-Advisory-2019-3978-01.html

来源:vigilance.fr

链接:https://vigilance.fr/vulnerability/Linux-kernel-privilege-escalation-via-Coalesced-MMIO-30379

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/155608/Red-Hat-Security-Advisory-2019-4154-01.html

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/155850/Red-Hat-Security-Advisory-2020-0027-01.html

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2019.4346.2/

受影响实体

    暂无


补丁

  • Linux kernel 安全漏洞的修复措施
    <!--
    2019-9-18
    -->