漏洞信息详情
Linux kernel 缓冲区错误漏洞
漏洞简介
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel 5.13.5及之前版本存在安全漏洞,该漏洞源于Linux kernel内核允许用户通过rtas参数导致主机操作系统内存损坏,进而触发漏洞。
漏洞公告
目前厂商已发布升级补丁以修复漏洞,补丁获取链接:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f62f3c20647ebd5fb6ecb8f0b477b9281c44c10a。
参考网址
来源:FEDORA
链接:https://lists.fedoraproject.org/archives/list/[email protected]/message/WDFA7DSQIPM7XPNXJBXFWXHJFVUBCAG6/
来源:MISC
链接:https://lore.kernel.org/linuxppc-dev/[email protected]/T/#u
来源:CONFIRM
链接:https://security.netapp.com/advisory/ntap-20210917-0005/
来源:DEBIAN
链接:https://www.debian.org/security/2021/dsa-4978
来源:MISC
链接:https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f62f3c20647ebd5fb6ecb8f0b477b9281c44c10a
来源:FEDORA
链接:https://lists.fedoraproject.org/archives/list/[email protected]/message/Z2YZ2DNURMYYVDT2NYAFDESJC35KCUDS/
来源:MLIST
链接:http://www.openwall.com/lists/oss-security/2021/07/27/2
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/164312/Ubuntu-Security-Notice-USN-5092-1.html
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/164331/Ubuntu-Security-Notice-USN-5094-1.html
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2021.2911
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/164487/Red-Hat-Security-Advisory-2021-3801-01.html
来源:access.redhat.com
链接:https://access.redhat.com/security/cve/cve-2021-37576
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2021.3249
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2021.3304
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/164666/Red-Hat-Security-Advisory-2021-4000-01.html
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2021.3010
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2021.2764
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/164057/Red-Hat-Security-Advisory-2021-3436-01.html
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2021.3435
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/164551/Ubuntu-Security-Notice-USN-5092-3.html
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2021.3499
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2021.3554
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2021.3372
来源:www.cybersecurity-help.cz
链接:https://www.cybersecurity-help.cz/vdb/SB2021101336
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/164223/Red-Hat-Security-Advisory-2021-3598-01.html
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/164583/Red-Hat-Security-Advisory-2021-3949-01.html
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2021.2789
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/164075/Red-Hat-Security-Advisory-2021-3447-01.html
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/164477/Red-Hat-Security-Advisory-2021-3814-01.html
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2021.3485
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2021.2691
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2021.3225
来源:www.cybersecurity-help.cz
链接:https://www.cybersecurity-help.cz/vdb/SB2021100617
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2021.3168
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/164412/Red-Hat-Security-Advisory-2021-3725-01.html
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2021.3388
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/164524/Ubuntu-Security-Notice-USN-5091-3.html
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/164562/Red-Hat-Security-Advisory-2021-3925-01.html
来源:nvd.nist.gov
链接:https://nvd.nist.gov/vuln/detail/CVE-2021-37576
来源:www.cybersecurity-help.cz
链接:https://www.cybersecurity-help.cz/vdb/SB2021101001
来源:www.cybersecurity-help.cz
链接:https://www.cybersecurity-help.cz/vdb/SB2021102116
受影响实体
暂无
补丁
- Linux kernel 缓冲区错误漏洞的修复措施<!--2021-7-26-->
还没有评论,来说两句吧...