CVE:CVE-2003-0859
CNNVD:CNNVD-200312-059
kernel Netlink是一网络接口实现。
应用程序在调用内核Netlink时没有正确实现getifaddrs()函数，本地攻击者可以利用这个漏洞对应用程序进行拒绝服务攻击。
问题是应用程序实现getifaddrs()与netlink设备进行交互时存在问题，在部分环境下，由getifaddrs()函数处理的匿名netlink消息可引起应用程序崩溃。
Red Hat声称GNU Zebra、Quagga和iproute均受此漏洞影响，会使这些应用程序崩溃。目前没有详细漏洞细节提供。
solution:Upgrade gnu glibc to a higher version than 2.3.2,and avoid the version 2.3.2; Upgrade gnu zebra to a higher version than 0.91a,0.92a,0.93a,0.93b,and avoid the version 0.91a,0.92a,0.93a,0.93b; Upgrade quagga quagga_routing_software_suite to a higher version than 0.96.2,and avoid the version 0.96.2; Upgrade sgi propack to a higher version than 2.2.1,2.3,and avoid the version 2.2.1,2.3; Upgrade redhat enterprise_linux to a higher version than 2.1,3.0,and avoid the version 2.1,3.0; Upgrade redhat linux_advanced_workstation to a higher version than 2.1,and avoid the version 2.1; Upgrade intel ia64 to a higher version than *