正文

Linux kernel 代码问题漏洞

admin
admin V管理员 /0 评论 /8 阅读
0224
此篇文章发布距今已超过1165天，您需要注意文章的内容或图片是否可用！

漏洞信息详情

Linux kernel 代码问题漏洞

  • CNNVD编号：CNNVD-202004-562
    • <!--
  • 危害等级： 高危-->
  • 危害等级： 高危
  • CVE编号： CVE-2020-11668
  • 漏洞类型： 代码问题
  • 发布时间： 2020-04-09
  • 威胁类型： 本地
  • 更新时间： 2021-08-09
  • 厂        商：
  • 漏洞来源： Ubuntu

漏洞简介

Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。

Linux kernel 5.6.1之前版本中存在代码问题漏洞，该漏洞源于drivers/media/usb/gspca/xirlink_cit.c文件没有正确处理无效的描述符。攻击者可借助特制的请求利用该漏洞造成拒绝服务。

漏洞公告

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a246b4d547708f33ff4d4b9a7a5dbac741dc89d8

参考网址

来源:MISC

链接:https://github.com/torvalds/linux/commit/a246b4d547708f33ff4d4b9a7a5dbac741dc89d8

来源:MLIST

链接:https://lists.debian.org/debian-lts-announce/2020/06/msg00012.html

来源:MISC

链接:https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a246b4d547708f33ff4d4b9a7a5dbac741dc89d8

来源:CONFIRM

链接:https://security.netapp.com/advisory/ntap-20200430-0004/

来源:MISC

链接:https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.6.1

来源:UBUNTU

链接:https://usn.ubuntu.com/4364-1/

来源:UBUNTU

链接:https://usn.ubuntu.com/4368-1/

来源:UBUNTU

链接:https://usn.ubuntu.com/4369-1/

来源:MLIST

链接:https://lists.debian.org/debian-lts-announce/2020/06/msg00011.html

来源:UBUNTU

链接:https://usn.ubuntu.com/4345-1/

来源:MLIST

链接:https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html

来源:DEBIAN

链接:https://www.debian.org/security/2020/dsa-4698

来源:vigilance.fr

链接:https://vigilance.fr/vulnerability/Linux-kernel-NULL-pointer-dereference-via-xirlink-cit-c-31997

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.3937/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.3907/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.2657

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/163747/Red-Hat-Security-Advisory-2021-3016-01.html

来源:www.cybersecurity-help.cz

链接:https://www.cybersecurity-help.cz/vdb/SB2021072287

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.1779.2/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.2461

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.2039/

来源:nvd.nist.gov

链接:https://nvd.nist.gov/vuln/detail/CVE-2020-11668

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.0189/

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/163607/Red-Hat-Security-Advisory-2021-2726-01.html

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/157871/Ubuntu-Security-Notice-USN-4369-2.html

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.1475/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.3064/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.1768.2/

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/157489/Ubuntu-Security-Notice-USN-4345-1.html

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/157793/Ubuntu-Security-Notice-USN-4369-1.html

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/157755/Ubuntu-Security-Notice-USN-4364-1.html

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.0589

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.4336/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.0692

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.0166/

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.2008/

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/157774/Ubuntu-Security-Notice-USN-4368-1.html

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2020.1830/

受影响实体

    暂无


补丁

  • Linux kernel 代码问题漏洞的修复措施
    <!--
    2020-4-9
    -->