CVE:CVE-2014-4943
CNNVD:CNNVD-201407-488
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。
Linux kernel 3.15.6及之前版本的net/l2tp/l2tp_ppp.c文件中的‘pppol2tp_setsockopt()’和‘pppol2tp_getsockopt()’函数存在安全漏洞。本地攻击者可利用该漏洞获取特权。
solution:Upgrade linux linux_kernel to a higher version than 3.15.6,and avoid the version (,3.15.6]; Upgrade opensuse opensuse to a higher version than 11.4,and avoid the version 11.4; Upgrade suse linux_enterprise_desktop to a higher version than 11:sp3,and avoid the version 11:sp3; Upgrade suse linux_enterprise_server to a higher version than 11:sp2,11:sp3,and avoid the version 11:sp2,11:sp3; Upgrade redhat enterprise_linux_server_aus to a higher version than 6.2,and avoid the version 6.2; Upgrade debian debian_linux to a higher version than 7.0,and avoid the version 7.0