Linux内核碎片重组远程拒绝服务攻击漏洞

漏洞信息详情

Linux内核碎片重组远程拒绝服务攻击漏洞

漏洞简介

Linux是一款免费开放源代码的操作系统。
Linux不正确处理部分类型的网络通信,远程攻击者可以利用这个漏洞使系统消耗过多资源,造成拒绝服务。
问题存在与Linux内核处理TCP/IP碎片重组机制中,目前没有提供详细漏洞细节。

漏洞公告

厂商补丁:
RedHat
——
RedHat已经为此发布了一个安全公告(RHSA-2003:187-01)以及相应补丁:

RHSA-2003:187-01:Updated 2.4 kernel fixes vulnerabilities and driver bugs

链接:https://www.redhat.com/support/errata/RHSA-2003-187.html” target=”_blank”>https://www.redhat.com/support/errata/RHSA-2003-187.html

补丁下载:

Red Hat Linux 7.1:

SRPMS:

ftp://updates.redhat.com/7.1/en/os/SRPMS/kernel-2.4.20-18.7.src.rpm

ftp://updates.redhat.com/7.1/en/os/SRPMS/quota-3.06-9.71.src.rpm

athlon:

ftp://updates.redhat.com/7.1/en/os/athlon/kernel-2.4.20-18.7.athlon.rpm

ftp://updates.redhat.com/7.1/en/os/athlon/kernel-smp-2.4.20-18.7.athlon.rpm

i386:

ftp://updates.redhat.com/7.1/en/os/i386/kernel-2.4.20-18.7.i386.rpm

ftp://updates.redhat.com/7.1/en/os/i386/kernel-source-2.4.20-18.7.i386.rpm

ftp://updates.redhat.com/7.1/en/os/i386/kernel-doc-2.4.20-18.7.i386.rpm

ftp://updates.redhat.com/7.1/en/os/i386/kernel-BOOT-2.4.20-18.7.i386.rpm

ftp://updates.redhat.com/7.1/en/os/i386/quota-3.06-9.71.i386.rpm

i586:

ftp://updates.redhat.com/7.1/en/os/i586/kernel-2.4.20-18.7.i586.rpm

ftp://updates.redhat.com/7.1/en/os/i586/kernel-smp-2.4.20-18.7.i586.rpm

i686:

ftp://updates.redhat.com/7.1/en/os/i686/kernel-2.4.20-18.7.i686.rpm

ftp://updates.redhat.com/7.1/en/os/i686/kernel-smp-2.4.20-18.7.i686.rpm

ftp://updates.redhat.com/7.1/en/os/i686/kernel-bigmem-2.4.20-18.7.i686.rpm

Red Hat Linux 7.2:

SRPMS:

ftp://updates.redhat.com/7.2/en/os/SRPMS/kernel-2.4.20-18.7.src.rpm

ftp://updates.redhat.com/7.2/en/os/SRPMS/quota-3.06-9.7.src.rpm

athlon:

ftp://updates.redhat.com/7.2/en/os/athlon/kernel-2.4.20-18.7.athlon.rpm

ftp://updates.redhat.com/7.2/en/os/athlon/kernel-smp-2.4.20-18.7.athlon.rpm

i386:

ftp://updates.redhat.com/7.2/en/os/i386/kernel-2.4.20-18.7.i386.rpm

ftp://updates.redhat.com/7.2/en/os/i386/kernel-source-2.4.20-18.7.i386.rpm

ftp://updates.redhat.com/7.2/en/os/i386/kernel-doc-2.4.20-18.7.i386.rpm

ftp://updates.redhat.com/7.2/en/os/i386/kernel-BOOT-2.4.20-18.7.i386.rpm

ftp://updates.redhat.com/7.2/en/os/i386/quota-3.06-9.7.i386.rpm

i586:

ftp://updates.redhat.com/7.2/en/os/i586/kernel-2.4.20-18.7.i586.rpm

ftp://updates.redhat.com/7.2/en/os/i586/kernel-smp-2.4.20-18.7.i586.rpm

i686:

ftp://updates.redhat.com/7.2/en/os/i686/kernel-2.4.20-18.7.i686.rpm

ftp://updates.redhat.com/7.2/en/os/i686/kernel-smp-2.4.20-18.7.i686.rpm

ftp://updates.redhat.com/7.2/en/os/i686/kernel-bigmem-2.4.20-18.7.i686.rpm

Red Hat Linux 7.3:

SRPMS:

ftp://updates.redhat.com/7.3/en/os/SRPMS/kernel-2.4.20-18.7.src.rpm

ftp://updates.redhat.com/7.3/en/os/SRPMS/quota-3.06-9.7.src.rpm

athlon:

ftp://updates.redhat.com/7.3/en/os/athlon/kernel-2.4.20-18.7.athlon.rpm

ftp://updates.redhat.com/7.3/en/os/athlon/kernel-smp-2.4.20-18.7.athlon.rpm

i386:

ftp://updates.redhat.com/7.3/en/os/i386/kernel-2.4.20-18.7.i386.rpm

ftp://updates.redhat.com/7.3/en/os/i386/kernel-source-2.4.20-18.7.i386.rpm

ftp://updates.redhat.com/7.3/en/os/i386/kernel-doc-2.4.20-18.7.i386.rpm

ftp://updates.redhat.com/7.3/en/os/i386/kernel-BOOT-2.4.20-18.7.i386.rpm

ftp://updates.redhat.com/7.3/en/os/i386/quota-3.06-9.7.i386.rpm

i586:

ftp://updates.redhat.com/7.3/en/os/i586/kernel-2.4.20-18.7.i586.rpm

ftp://updates.redhat.com/7.3/en/os/i586/kernel-smp-2.4.20-18.7.i586.rpm

i686:

ftp://updates.redhat.com/7.3/en/os/i686/kernel-2.4.20-18.7.i686.rpm

ftp://updates.redhat.com/7.3/en/os/i686/kernel-smp-2.4.20-18.7.i686.rpm

ftp://updates.redhat.com/7.3/en/os/i686/kernel-bigmem-2.4.20-18.7.i686.rpm

Red Hat Linux 8.0:

SRPMS:

ftp://updates.redhat.com/8.0/en/os/SRPMS/kernel-2.4.20-18.8.src.rpm

athlon:

ftp://updates.redhat.com/8.0/en/os/athlon/kernel-2.4.20-18.8.athlon.rpm


来源: REDHAT
名称: RHSA-2003:187
链接:http://www.redhat.com/support/errata/RHSA-2003-187.html

来源: DEBIAN
名称: DSA-311
链接:http://www.debian.org/security/2003/dsa-311

来源: TURBO
名称: TLSA-2003-41
链接:http://www.turbolinux.com/security/TLSA-2003-41.txt

来源: REDHAT
名称: RHSA-2003:198
链接:http://www.redhat.com/support/errata/RHSA-2003-198.html

来源: REDHAT
名称: RHSA-2003:195
链接:http://www.redhat.com/support/errata/RHSA-2003-195.html

来源: DEBIAN
名称: DSA-442
链接:http://www.debian.org/security/2004/dsa-442

来源: DEBIAN
名称: DSA-336
链接:http://www.debian.org/security/2003/dsa-336

来源: DEBIAN
名称: DSA-332
链接:http://www.debian.org/security/2003/dsa-332

来源: DEBIAN
名称: DSA-312
链接:http://www.debian.org/security/2003/dsa-312

来源: US Government Resource: oval:org.mitre.oval:def:295
名称: oval:org.mitre.oval:def:295
链接:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:295

© 版权声明
THE END
喜欢就支持一下吧
点赞0 分享