CVE:CVE-2017-7558
CNNVD:CNNVD-201704-259
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。
Linux kernel 4.7-rc1版本至4.13版本中的‘inet_diag_msg_sctp{,l}addr_fill()’和‘sctp_get_sctp_info()’函数存在越界读取漏洞。攻击者可利用该漏洞泄露内核数据。
solution:Upgrade linux linux_kernel to a higher version than 4.13,4.7:rc1,4.7:rc2,4.7:rc3,4.7:rc4,4.7:rc5,4.7:rc6,4.7:rc7,and avoid the version [4.7,4.13],4.7:rc1,4.7:rc2,4.7:rc3,4.7:rc4,4.7:rc5,4.7:rc6,4.7:rc7; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0