CVE:CVE-2016-3707
CNNVD:CNNVD-201605-416
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel存在访问控制错误漏洞。远程攻击者可通过发送特制的ICMP Echo Request数据包利用该漏洞执行任意SysRq命令。
solution:Upgrade linux linux_kernel-rt to a higher version than 3.10.0,and avoid the version (,3.10.0]; Upgrade redhat enterprise_linux_for_real_time to a higher version than 7,and avoid the version 7; Upgrade redhat enterprise_linux_for_real_time_for_nfv to a higher version than 7,and avoid the version 7; Upgrade novell suse_linux_enterprise_real_time_extension to a higher version than 12.0:sp1,and avoid the version 12.0:sp1