CVE:CVE-2010-2478
CNNVD:CNNVD-201009-280
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel 2.6.33.7之前版本存在输入验证错误漏洞。本地用户可以借助带有能够触发缓冲区溢出的值导致拒绝服务或可能引起其他未明影响。
solution:Upgrade linux linux_kernel to a higher version than 2.6.33.7,and avoid the version (,2.6.33.7); Upgrade canonical ubuntu_linux to a higher version than 6.06,8.04,9.04,9.10,10.04,10.10,and avoid the version 6.06,8.04,9.04,9.10,10.04,10.10; Upgrade suse linux_enterprise_desktop to a higher version than 11:sp1,and avoid the version 11:sp1; Upgrade suse linux_enterprise_server to a higher version than 11:sp1,and avoid the version 11:sp1