CVE:CVE-2016-5829
CNNVD:CNNVD-201606-598
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。
Linux kernel 4.6.3及之前版本的drivers/hid/usbhid/hiddev.c文件中的‘hiddev_ioctl_usage’函数存在基于堆的缓冲区溢出漏洞。本地攻击者可借助特制的HIDIOCGUSAGES或HIDIOCSUSAGES ioctl调用利用该漏洞造成拒绝服务。
solution:Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade linux linux_kernel to a higher version than 3.2.82,3.10.103,3.12.62,3.14.74,3.16.37,3.18.37,4.1.28,4.4.16,4.6.5,and avoid the version (,3.2.82),[3.3,3.10.103),[3.11,3.12.62),[3.13,3.14.74),[3.15,3.16.37),[3.17,3.18.37),[3.19,4.1.28),[4.2,4.4.16),[4.5,4.6.5); Upgrade novell suse_linux_enterprise_real_time_extension to a higher version than 12:sp1,and avoid the version 12:sp1; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,16.04,and avoid the version 12.04,14.04,16.04