CVE:CVE-2020-27815
CNNVD:CNNVD-202011-2093
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel 存在缓冲区错误漏洞，该漏洞允许攻击者通过dbAdjTree()强制读取一个无效的地址，以触发拒绝服务，或获取敏感信息。
solution:Upgrade linux linux_kernel to a higher version than 4.9.249,4.14.213,4.19.164,5.4.86,5.10.4,and avoid the version (4.4.249,),[4.5,4.9.249),[4.10,4.14.213),[4.15,4.19.164),[4.20,5.4.86),[5.5,5.10.4),no fixed version after 4.4.249; Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade netapp h300s_firmware to a higher version than -; Upgrade netapp h500s_firmware to a higher version than -; Upgrade netapp h700s_firmware to a higher version than -; Upgrade netapp h300e_firmware to a higher version than -; Upgrade netapp h500e_firmware to a higher version than -; Upgrade netapp h700e_firmware to a higher version than -; Upgrade netapp h410s_firmware to a higher version than -; Upgrade netapp h410c_firmware to a higher version than -; Upgrade netapp aff_a250_firmware to a higher version than -; Upgrade netapp fas500f_firmware to a higher version than -