CVE:CVE-2009-3612
CNNVD:CNNVD-200910-267
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel 2.6.32-rc5之前的2.6.x版本和2.4.37.6版本及之前版本存在信息泄露漏洞。攻击者可利用该漏洞获取内存中的敏感信息。
solution:Upgrade linux linux_kernel to a higher version than 2.4.37.6,2.6.32,2.6.32,2.6.32:rc1,2.6.32:rc2,2.6.32:rc3,2.6.32:rc4,and avoid the version (,2.4.37.6],[2.6.0,2.6.32),2.6.32,2.6.32:rc1,2.6.32:rc2,2.6.32:rc3,2.6.32:rc4; Upgrade opensuse opensuse to a higher version than 11.0,and avoid the version 11.0; Upgrade suse linux_enterprise_desktop to a higher version than 10:sp2,10:sp3,and avoid the version 10:sp2,10:sp3; Upgrade suse linux_enterprise_server to a higher version than 10:sp2,10:sp3,and avoid the version 10:sp2,10:sp3; Upgrade suse linux_enterprise_software_development_kit to a higher version than 10:sp2,10:sp3,and avoid the version 10:sp2,10:sp3; Upgrade canonical ubuntu_linux to a higher version than 6.06,8.04,8.10,9.04,9.10,and avoid the version 6.06,8.04,8.10,9.04,9.10; Upgrade fedoraproject fedora to a higher version than 10,and avoid the version 10