CVE:CVE-2018-13405
CNNVD:CNNVD-201807-441
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel 4.17.4及之前版本中的fs/inode.c文件的‘inode_init_owner’函数存在权限许可和访问控制问题漏洞。攻击者可利用该漏洞获取提升的权限。
solution:Upgrade linux linux_kernel to a higher version than 3.16,and avoid the version (,3.16]; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,and avoid the version 14.04,16.04,18.04; Upgrade fedoraproject fedora to a higher version than 34,35,and avoid the version 34,35; Upgrade redhat mrg_realtime to a higher version than 2.0,and avoid the version 2.0; Upgrade redhat virtualization to a higher version than 4.0,and avoid the version 4.0; Upgrade redhat enterprise_linux_aus to a higher version than 7.4,and avoid the version 7.4; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_eus to a higher version than 7.4,7.5,and avoid the version 7.4,7.5; Upgrade redhat enterprise_linux_for_real_time to a higher version than 7,and avoid the version 7; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 6.6,7.2,7.3,and avoid the version 6.6,7.2,7.3; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.2,7.3,7.4,and avoid the version 7.2,7.3,7.4; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade f5 big-ip_access_policy_manager to a higher version than 13.1.3.5,14.1.3.1,15.0.1.4,15.1.0,16.0.0,and avoid the version [13.0.0,13.1.3.5),[14.0.0,14.1.3.1),[15.0.0,15.0.1.4),15.1.0,16.0.0; Upgrade f5 big-ip_advanced_firewall_manager to a higher version than 13.1.3.5,14.1.3.1,15.0.1.4,15.1.0,16.0.0,and avoid the version [13.0.0,13.1.3.5),[14.0.0,14.1.3.1),[15.0.0,15.0.1.4),15.1.0,16.0.0; Upgrade f5 big-ip_analytics to a higher version than 13.1.3.5,14.1.3.1,15.0.1.4,15.1.0,16.0.0,and avoid the version [13.0.0,13.1.3.5),[14.0.0,14.1.3.1),[15.0.0,15.0.1.4),15.1.0,16.0.0; Upgrade f5 big-ip_application_acceleration_manager to a higher version than 13.1.3.5,14.1.3.1,15.0.1.4,15.1.0,16.0.0,and avoid the version [13.0.0,13.1.3.5),[14.0.0,14.1.3.1),[15.0.0,15.0.1.4),15.1.0,16.0.0; Upgrade f5 big-ip_application_security_manager to a higher version than 13.1.3.5,14.1.3.1,15.0.1.4,15.1.0,16.0.0,and avoid the version [13.0.0,13.1.3.5),[14.0.0,14.1.3.1),[15.0.0,15.0.1.4),15.1.0,16.0.0; Upgrade f5 big-ip_domain_name_system to a higher version than 13.1.3.5,14.1.3.1,15.0.1.4,15.1.0,16.0.0,and avoid the version [13.0.0,13.1.3.5),[14.0.0,14.1.3.1),[15.0.0,15.0.1.4),15.1.0,16.0.0; Upgrade f5 big-ip_edge_gateway to a higher version than 13.1.3.5,14.1.3.1,15.0.1.4,15.1.0,16.0.0,and avoid the version [13.0.0,13.1.3.5),[14.0.0,14.1.3.1),[15.0.0,15.0.1.4),15.1.0,16.0.0; Upgrade f5 big-ip_fraud_protection_service to a higher version than 13.1.3.5,14.1.3.1,15.0.1.4,15.1.0,16.0.0,and avoid the version [13.0.0,13.1.3.5),[14.0.0,14.1.3.1),[15.0.0,15.0.1.4),15.1.0,16.0.0; Upgrade f5 big-ip_global_traffic_manager to a higher version than 13.1.3.5,14.1.3.1,15.0.1.4,15.1.0,16.0.0,and avoid the version [13.0.0,13.1.3.5),[14.0.0,14.1.3.1),[15.0.0,15.0.1.4),15.1.0,16.0.0; Upgrade f5 big-ip_link_controller to a higher version than 13.1.3.5,14.1.3.1,15.0.1.4,15.1.0,16.0.0,and avoid the version [13.0.0,13.1.3.5),[14.0.0,14.1.3.1),[15.0.0,15.0.1.4),15.1.0,16.0.0; Upgrade f5 big-ip_local_traffic_manager to a higher version than 13.1.3.5,14.1.3.1,15.0.1.4,15.1.0,16.0.0,and avoid the version [13.0.0,13.1.3.5),[14.0.0,14.1.3.1),[15.0.0,15.0.1.4),15.1.0,16.0.0; Upgrade f5 big-ip_policy_enforcement_manager to a higher version than 13.1.3.5,14.1.3.1,15.0.1.4,15.1.0,16.0.0,and avoid the version [13.0.0,13.1.3.5),[14.0.0,14.1.3.1),[15.0.0,15.0.1.4),15.1.0,16.0.0; Upgrade f5 big-ip_webaccelerator to a higher version than 13.1.3.5,14.1.3.1,15.0.1.4,15.1.0,16.0.0,and avoid the version [13.0.0,13.1.3.5),[14.0.0,14.1.3.1),[15.0.0,15.0.1.4),15.1.0,16.0.0