CVE:CVE-2014-3673
CNNVD:CNNVD-201411-037
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel 3.17.2及之前版本存在输入验证错误漏洞。远程攻击者可借助畸形的ASCONF块利用该漏洞造成拒绝服务（系统崩溃）。
solution:Upgrade linux linux_kernel to a higher version than 3.2.64,3.4.107,3.10.61,3.12.34,3.14.25,3.16.35,3.17.4,and avoid the version [2.6.12,3.2.64),[3.3,3.4.107),[3.5,3.10.61),[3.11,3.12.34),[3.13,3.14.25),[3.15,3.16.35),[3.17,3.17.4); Upgrade redhat enterprise_linux to a higher version than 5.0,and avoid the version 5.0; Upgrade redhat enterprise_mrg to a higher version than 2.0,and avoid the version 2.0; Upgrade canonical ubuntu_linux to a higher version than 12.04,and avoid the version 12.04; Upgrade debian debian_linux to a higher version than 7.0,and avoid the version 7.0; Upgrade opensuse evergreen to a higher version than 11.4,and avoid the version 11.4; Upgrade suse linux_enterprise_software_development_kit to a higher version than 12,and avoid the version 12; Upgrade suse linux_enterprise_workstation_extension to a higher version than 12,and avoid the version 12; Upgrade suse suse_linux_enterprise_server to a higher version than 10:sp4,11:sp1,11:sp2,12,and avoid the version 10:sp4,11:sp1,11:sp2,12; Upgrade oracle linux to a higher version than 5,6,7,and avoid the version 5,6,7