CVE:CVE-2008-3272
CNNVD:CNNVD-200808-094
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。
Linux Kernel 2.6.27-rc2之前版本中的sound/core/seq/oss/seq_oss_synth.c文件的‘snd_seq_oss_synth_make_info()’函数存在信息泄露漏洞，该漏洞源于在返回信息前，程序没有验证设备号是否在max_synthdev定义的范围内。本地攻击者可利用该漏洞获得敏感信息。
solution:Upgrade linux linux_kernel to a higher version than 2.6.27,2.6.27,2.6.27:rc1,and avoid the version (,2.6.27),2.6.27,2.6.27:rc1; Upgrade debian debian_linux to a higher version than 4.0,and avoid the version 4.0; Upgrade canonical ubuntu_linux to a higher version than 6.06,7.04,7.10,8.04,and avoid the version 6.06,7.04,7.10,8.04; Upgrade redhat enterprise_linux_desktop to a higher version than 4.0,and avoid the version 4.0; Upgrade redhat enterprise_linux_eus to a higher version than 4.7,and avoid the version 4.7; Upgrade redhat enterprise_linux_server to a higher version than 4.0,and avoid the version 4.0; Upgrade redhat enterprise_linux_workstation to a higher version than 4.0,and avoid the version 4.0