正文

Linux kernel 数据伪造问题漏洞

admin
admin V管理员 /0 评论 /9 阅读
0224
此篇文章发布距今已超过1167天，您需要注意文章的内容或图片是否可用！

漏洞信息详情

Linux kernel 数据伪造问题漏洞

  • CNNVD编号：CNNVD-202005-1289
    • <!--
  • 危害等级： 中危-->
  • 危害等级： 中危
  • CVE编号： CVE-2020-10751
  • 漏洞类型： 数据伪造问题
  • 发布时间： 2020-05-26
  • 威胁类型： 本地
  • 更新时间： 2021-06-15
  • 厂        商：
  • 漏洞来源： Ubuntu

漏洞简介

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。

Linux kernels的SELinux LSM中hook的实现存在数据伪造问题漏洞。攻击者可利用该漏洞绕过SELinux netlink权限检查。

漏洞公告

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=fb73974172ffaaf57a7c42f35424d9aece1a5af6

参考网址

来源:UBUNTU

链接:https://usn.ubuntu.com/4413-1/

来源:SUSE

链接:http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00008.html

来源:UBUNTU

链接:https://usn.ubuntu.com/4412-1/

来源:CONFIRM

链接:https://lore.kernel.org/selinux/CACT4Y+b8HiV6KFuAPysZD=5hmyO4QisgxCKi4DHU3CfMPSP=yg@mail.gmail.com/

来源:MLIST

链接:https://lists.debian.org/debian-lts-announce/2020/06/msg00011.html

来源:CONFIRM

链接:https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=fb73974172ffaaf57a7c42f35424d9aece1a5af6

来源:MLIST

链接:https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html

来源:UBUNTU

链接:https://usn.ubuntu.com/4391-1/

来源:MLIST

链接:https://lists.debian.org/debian-lts-announce/2020/06/msg00012.html

来源:UBUNTU

链接:https://usn.ubuntu.com/4389-1/

来源:UBUNTU

链接:https://usn.ubuntu.com/4390-1/

来源:CONFIRM

链接:https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10751

来源:SUSE

链接:http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00022.html

来源:MLIST

链接:http://www.openwall.com/lists/oss-security/2020/05/27/3

来源:CONFIRM

链接:https://www.openwall.com/lists/oss-security/2020/04/30/5

来源:DEBIAN

链接:https://www.debian.org/security/2020/dsa-4698

来源:DEBIAN

链接:https://www.debian.org/security/2020/dsa-4699

来源:MISC

链接:https://www.oracle.com/security-alerts/cpuApr2021.html

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.3888/

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-ibm-data-risk-manager-is-affected-by-multiple-vulnerabilities-3/

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/158013/Ubuntu-Security-Notice-USN-4391-1.html

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-ibm-qradar-siem-is-vulnerable-to-using-components-with-known-vulnerabilities-7/

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/158298/Ubuntu-Security-Notice-USN-4413-1.html

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.2388/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.2532/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.0319/

来源:nvd.nist.gov

链接:https://nvd.nist.gov/vuln/detail/CVE-2020-10751

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.2009/

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-ibm-security-guardium-is-affected-by-kernel-vulnerabilities-7/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.3063/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.0692

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.2711/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.2039/

来源:www.ibm.com

链接:https://www.ibm.com/blogs/psirt/security-bulletin-ibm-security-guardium-is-affected-by-kernel-vulnerabilities-6/

来源:vigilance.fr

链接:https://vigilance.fr/vulnerability/Linux-kernel-SELinux-validation-bypass-for-netlink-messages-32346

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.2739/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.3346/

来源:www.nsfocus.net

链接:http://www.nsfocus.net/vulndb/48994

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.3043/

受影响实体

    暂无


补丁

  • Linux kernels SELinux LSM hook 数据伪造问题漏洞的修复措施
    <!--
    2020-5-26
    -->