CVE:CVE-2016-5244
CNNVD:CNNVD-201606-142
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。
Linux kernel 4.6.3之前版本的net/rds/recv.c文件中‘rds_inc_info_copy’函数中存在安全漏洞，该漏洞源于程序没有正确初始化特定的结构体成员。远程攻击者可通过读取RDS消息利用该漏洞获取内核栈内存中的敏感信息。
solution:Upgrade fedoraproject fedora to a higher version than 23,24,22,and avoid the version 23,24,22; Upgrade suse linux_enterprise_real_time_extension to a higher version than 11:sp4,12:sp1,and avoid the version 11:sp4,12:sp1; Upgrade suse linux_enterprise_debuginfo to a higher version than 11:sp4,and avoid the version 11:sp4; Upgrade suse linux_enterprise_server to a higher version than 11:extra,11:sp4,and avoid the version 11:extra,11:sp4; Upgrade redhat enterprise_linux to a higher version than 6.0,5,and avoid the version 6.0,5; Upgrade suse suse_linux_enterprise_software_development_kit to a higher version than 11:sp4,12,and avoid the version 11:sp4,12; Upgrade suse linux_enterprise_workstation_extension to a higher version than 12,and avoid the version 12; Upgrade suse linux_enterprise_desktop to a higher version than 12,and avoid the version 12; Upgrade suse opensuse_leap to a higher version than 42.1,and avoid the version 42.1; Upgrade linux linux_kernel to a higher version than 4.6.3,and avoid the version (,4.6.3]; Upgrade suse suse_linux_enterprise_server to a higher version than 12,and avoid the version 12