CVE:CVE-2018-10840
CNNVD:CNNVD-201807-1207
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel存在缓冲区错误漏洞。攻击者利用该漏洞通过特制的ext4映像导致基于堆的缓冲区溢出。
solution:Upgrade linux linux_kernel to a higher version than -; Upgrade canonical ubuntu_linux to a higher version than 14.04,18.04,and avoid the version 14.04,18.04; Upgrade redhat enterprise_linux to a higher version than 7.0,and avoid the version 7.0