漏洞信息详情
Linux内核碎片重组远程拒绝服务攻击漏洞
- CNNVD编号:CNNVD-200306-061
- 危害等级: 中危
- CVE编号:
CVE-2003-0364
- 漏洞类型:
设计错误
- 发布时间:
2003-06-16
- 威胁类型:
远程
- 更新时间:
2005-10-20
- 厂 商:
redhat - 漏洞来源:
Red Hat Security A… -
漏洞简介
Linux是一款免费开放源代码的操作系统。
Linux不正确处理部分类型的网络通信,远程攻击者可以利用这个漏洞使系统消耗过多资源,造成拒绝服务。
问题存在与Linux内核处理TCP/IP碎片重组机制中,目前没有提供详细漏洞细节。
漏洞公告
厂商补丁:
RedHat
——
RedHat已经为此发布了一个安全公告(RHSA-2003:187-01)以及相应补丁:
RHSA-2003:187-01:Updated 2.4 kernel fixes vulnerabilities and driver bugs
链接:https://www.redhat.com/support/errata/RHSA-2003-187.html” target=”_blank”>https://www.redhat.com/support/errata/RHSA-2003-187.html
补丁下载:
Red Hat Linux 7.1:
SRPMS:
ftp://updates.redhat.com/7.1/en/os/SRPMS/kernel-2.4.20-18.7.src.rpm
ftp://updates.redhat.com/7.1/en/os/SRPMS/quota-3.06-9.71.src.rpm
athlon:
ftp://updates.redhat.com/7.1/en/os/athlon/kernel-2.4.20-18.7.athlon.rpm
ftp://updates.redhat.com/7.1/en/os/athlon/kernel-smp-2.4.20-18.7.athlon.rpm
i386:
ftp://updates.redhat.com/7.1/en/os/i386/kernel-2.4.20-18.7.i386.rpm
ftp://updates.redhat.com/7.1/en/os/i386/kernel-source-2.4.20-18.7.i386.rpm
ftp://updates.redhat.com/7.1/en/os/i386/kernel-doc-2.4.20-18.7.i386.rpm
ftp://updates.redhat.com/7.1/en/os/i386/kernel-BOOT-2.4.20-18.7.i386.rpm
ftp://updates.redhat.com/7.1/en/os/i386/quota-3.06-9.71.i386.rpm
i586:
ftp://updates.redhat.com/7.1/en/os/i586/kernel-2.4.20-18.7.i586.rpm
ftp://updates.redhat.com/7.1/en/os/i586/kernel-smp-2.4.20-18.7.i586.rpm
i686:
ftp://updates.redhat.com/7.1/en/os/i686/kernel-2.4.20-18.7.i686.rpm
ftp://updates.redhat.com/7.1/en/os/i686/kernel-smp-2.4.20-18.7.i686.rpm
ftp://updates.redhat.com/7.1/en/os/i686/kernel-bigmem-2.4.20-18.7.i686.rpm
Red Hat Linux 7.2:
SRPMS:
ftp://updates.redhat.com/7.2/en/os/SRPMS/kernel-2.4.20-18.7.src.rpm
ftp://updates.redhat.com/7.2/en/os/SRPMS/quota-3.06-9.7.src.rpm
athlon:
ftp://updates.redhat.com/7.2/en/os/athlon/kernel-2.4.20-18.7.athlon.rpm
ftp://updates.redhat.com/7.2/en/os/athlon/kernel-smp-2.4.20-18.7.athlon.rpm
i386:
ftp://updates.redhat.com/7.2/en/os/i386/kernel-2.4.20-18.7.i386.rpm
ftp://updates.redhat.com/7.2/en/os/i386/kernel-source-2.4.20-18.7.i386.rpm
ftp://updates.redhat.com/7.2/en/os/i386/kernel-doc-2.4.20-18.7.i386.rpm
ftp://updates.redhat.com/7.2/en/os/i386/kernel-BOOT-2.4.20-18.7.i386.rpm
ftp://updates.redhat.com/7.2/en/os/i386/quota-3.06-9.7.i386.rpm
i586:
ftp://updates.redhat.com/7.2/en/os/i586/kernel-2.4.20-18.7.i586.rpm
ftp://updates.redhat.com/7.2/en/os/i586/kernel-smp-2.4.20-18.7.i586.rpm
i686:
ftp://updates.redhat.com/7.2/en/os/i686/kernel-2.4.20-18.7.i686.rpm
ftp://updates.redhat.com/7.2/en/os/i686/kernel-smp-2.4.20-18.7.i686.rpm
ftp://updates.redhat.com/7.2/en/os/i686/kernel-bigmem-2.4.20-18.7.i686.rpm
Red Hat Linux 7.3:
SRPMS:
ftp://updates.redhat.com/7.3/en/os/SRPMS/kernel-2.4.20-18.7.src.rpm
ftp://updates.redhat.com/7.3/en/os/SRPMS/quota-3.06-9.7.src.rpm
athlon:
ftp://updates.redhat.com/7.3/en/os/athlon/kernel-2.4.20-18.7.athlon.rpm
ftp://updates.redhat.com/7.3/en/os/athlon/kernel-smp-2.4.20-18.7.athlon.rpm
i386:
ftp://updates.redhat.com/7.3/en/os/i386/kernel-2.4.20-18.7.i386.rpm
ftp://updates.redhat.com/7.3/en/os/i386/kernel-source-2.4.20-18.7.i386.rpm
ftp://updates.redhat.com/7.3/en/os/i386/kernel-doc-2.4.20-18.7.i386.rpm
ftp://updates.redhat.com/7.3/en/os/i386/kernel-BOOT-2.4.20-18.7.i386.rpm
ftp://updates.redhat.com/7.3/en/os/i386/quota-3.06-9.7.i386.rpm
i586:
ftp://updates.redhat.com/7.3/en/os/i586/kernel-2.4.20-18.7.i586.rpm
ftp://updates.redhat.com/7.3/en/os/i586/kernel-smp-2.4.20-18.7.i586.rpm
i686:
ftp://updates.redhat.com/7.3/en/os/i686/kernel-2.4.20-18.7.i686.rpm
ftp://updates.redhat.com/7.3/en/os/i686/kernel-smp-2.4.20-18.7.i686.rpm
ftp://updates.redhat.com/7.3/en/os/i686/kernel-bigmem-2.4.20-18.7.i686.rpm
Red Hat Linux 8.0:
SRPMS:
ftp://updates.redhat.com/8.0/en/os/SRPMS/kernel-2.4.20-18.8.src.rpm
athlon:
ftp://updates.redhat.com/8.0/en/os/athlon/kernel-2.4.20-18.8.athlon.rpm
来源: REDHAT
名称: RHSA-2003:187
链接:http://www.redhat.com/support/errata/RHSA-2003-187.html
来源: DEBIAN
名称: DSA-311
链接:http://www.debian.org/security/2003/dsa-311
来源: TURBO
名称: TLSA-2003-41
链接:http://www.turbolinux.com/security/TLSA-2003-41.txt
来源: REDHAT
名称: RHSA-2003:198
链接:http://www.redhat.com/support/errata/RHSA-2003-198.html
来源: REDHAT
名称: RHSA-2003:195
链接:http://www.redhat.com/support/errata/RHSA-2003-195.html
来源: DEBIAN
名称: DSA-442
链接:http://www.debian.org/security/2004/dsa-442
来源: DEBIAN
名称: DSA-336
链接:http://www.debian.org/security/2003/dsa-336
来源: DEBIAN
名称: DSA-332
链接:http://www.debian.org/security/2003/dsa-332
来源: DEBIAN
名称: DSA-312
链接:http://www.debian.org/security/2003/dsa-312
来源: US Government Resource: oval:org.mitre.oval:def:295
名称: oval:org.mitre.oval:def:295
链接:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:295