CVE:CVE-2019-3460
CNNVD:CNNVD-201901-470
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel中的逻辑链路控制与适配协议实现存在输入验证错误漏洞。攻击者可借助特制的数据包利用该漏洞泄露信息。
solution:Upgrade linux linux_kernel to a higher version than 5.1,and avoid the version (,5.1]; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,18.10,and avoid the version 14.04,16.04,18.04,18.10; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat codeready_linux_builder to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat virtualization_host to a higher version than 4.0,and avoid the version 4.0; Upgrade redhat enterprise_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_eus to a higher version than 8.1,8.2,8.4,and avoid the version 8.1,8.2,8.4; Upgrade redhat enterprise_linux_for_real_time to a higher version than 7,8,and avoid the version 7,8; Upgrade redhat enterprise_linux_for_real_time_for_nfv to a higher version than 7,8,and avoid the version 7,8; Upgrade redhat enterprise_linux_for_real_time_for_nfv_tus to a higher version than 8.2,8.4,and avoid the version 8.2,8.4; Upgrade redhat enterprise_linux_for_real_time_tus to a higher version than 8.2,8.4,and avoid the version 8.2,8.4; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 8.2,8.4,and avoid the version 8.2,8.4; Upgrade redhat enterprise_linux_server_tus to a higher version than 8.2,8.4,and avoid the version 8.2,8.4; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0