CVE:CVE-2017-17805
CNNVD:CNNVD-201712-754
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。
Linux kernel 4.14.8之前的版本中的Salsa20加密算法存在安全漏洞，该漏洞源于程序没有正确的处理长度为零的输入。本地攻击者可通过执行一系列特制的系统调用利用该漏洞造成拒绝服务（未初始化内存释放和内核崩溃）。
solution:Upgrade linux linux_kernel to a higher version than 3.2.97,3.16.52,3.18.89,4.1.49,4.4.107,4.9.71,4.14.8,and avoid the version [2.6.25,3.2.97),[3.3,3.16.52),[3.17,3.18.89),[3.19,4.1.49),[4.2,4.4.107),[4.5,4.9.71),[4.10,4.14.8); Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade opensuse leap to a higher version than 42.2,and avoid the version 42.2; Upgrade opensuse_project leap to a higher version than 42.3,and avoid the version 42.3; Upgrade suse linux_enterprise_desktop to a higher version than 12:sp2,12:sp3,and avoid the version 12:sp2,12:sp3; Upgrade suse linux_enterprise_server to a higher version than 11:extra,11:sp4,12:sp2,12:sp3,and avoid the version 11:extra,11:sp4,12:sp2,12:sp3; Upgrade suse linux_enterprise_server_for_raspberry_pi to a higher version than 12:sp2,and avoid the version 12:sp2; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,16.04,17.10,and avoid the version 12.04,14.04,16.04,17.10