CVE:CVE-2016-5104
CNNVD:CNNVD-201605-663
libimobiledevice是一个可让Linux支持连接iPhone、iPodTouch等iOS设备的软件协议库和工具。libusbmuxd是一个用于与iOS设备连接的客户端库。
libimobiledevice和libusbmuxd的common/socket.c文件中的‘socket_create’函数存在安全漏洞。远程攻击者可通过连接IPv4 TCP套接字利用该漏洞绕过既定的访问限制，与iOS设备上的服务进行通信。
solution:Upgrade libimobiledevice libimobiledevice to a higher version than 1.2.0,and avoid the version (,1.2.0]; Upgrade libimobiledevice libusbmuxd to a higher version than 1.0.10,and avoid the version (,1.0.10]; Upgrade canonical ubuntu_linux to a higher version than 14.04,15.10,16.04,and avoid the version 14.04,15.10,16.04; Upgrade opensuse leap to a higher version than 42.1,and avoid the version 42.1; Upgrade opensuse opensuse to a higher version than 13.2,and avoid the version 13.2