CVE:CVE-2011-2517
CNNVD:CNNVD-201107-055
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。
Linux kernel 2.6.39.2之前版本的net/wireless/nl80211.c中存在多个缓冲区溢出漏洞。本地用户可通过利用在长SSID值扫描操作过程中的CAP_NET_ADMIN能力获取权限。
solution:Upgrade linux linux_kernel to a higher version than 2.6.39.2,and avoid the version (,2.6.39.2); Upgrade redhat enterprise_linux to a higher version than 5.0,and avoid the version 5.0; Upgrade redhat enterprise_linux_desktop to a higher version than 5.0,and avoid the version 5.0; Upgrade redhat enterprise_linux_server to a higher version than 5.0,and avoid the version 5.0; Upgrade redhat enterprise_linux_workstation to a higher version than 5.0,and avoid the version 5.0