漏洞信息详情
RedHat Linux内核MXCSR处理未明漏洞
- CNNVD编号:CNNVD-200306-085
- 危害等级: 超危
- CVE编号:
CVE-2003-0248
- 漏洞类型:
其他
- 发布时间:
2003-06-16
- 威胁类型:
远程
- 更新时间:
2005-10-20
- 厂 商:
redhat - 漏洞来源:
Andrea Arcangeli -
漏洞简介
RedHat是一款免费开放源代码的Linux操作系统。
RedHat Linux内核MXCSR处理器代码存在未明漏洞,本地攻击者可以利用这个漏洞可能导致系统崩溃。
当低级MXCSR内核代码处理畸形地址时会出发此漏洞,问题可能是垃圾数据保留在CPU状态寄存器引起。
漏洞公告
厂商补丁:
RedHat
——
RedHat已经为此发布了一个安全公告(RHSA-2003:187-01)以及相应补丁:
RHSA-2003:187-01:Updated 2.4 kernel fixes vulnerabilities and driver bugs
链接:https://www.redhat.com/support/errata/RHSA-2003-187.html” target=”_blank”>https://www.redhat.com/support/errata/RHSA-2003-187.html
补丁下载:
Red Hat Linux 7.1:
SRPMS:
ftp://updates.redhat.com/7.1/en/os/SRPMS/kernel-2.4.20-18.7.src.rpm
ftp://updates.redhat.com/7.1/en/os/SRPMS/quota-3.06-9.71.src.rpm
athlon:
ftp://updates.redhat.com/7.1/en/os/athlon/kernel-2.4.20-18.7.athlon.rpm
ftp://updates.redhat.com/7.1/en/os/athlon/kernel-smp-2.4.20-18.7.athlon.rpm
i386:
ftp://updates.redhat.com/7.1/en/os/i386/kernel-2.4.20-18.7.i386.rpm
ftp://updates.redhat.com/7.1/en/os/i386/kernel-source-2.4.20-18.7.i386.rpm
ftp://updates.redhat.com/7.1/en/os/i386/kernel-doc-2.4.20-18.7.i386.rpm
ftp://updates.redhat.com/7.1/en/os/i386/kernel-BOOT-2.4.20-18.7.i386.rpm
ftp://updates.redhat.com/7.1/en/os/i386/quota-3.06-9.71.i386.rpm
i586:
ftp://updates.redhat.com/7.1/en/os/i586/kernel-2.4.20-18.7.i586.rpm
ftp://updates.redhat.com/7.1/en/os/i586/kernel-smp-2.4.20-18.7.i586.rpm
i686:
ftp://updates.redhat.com/7.1/en/os/i686/kernel-2.4.20-18.7.i686.rpm
ftp://updates.redhat.com/7.1/en/os/i686/kernel-smp-2.4.20-18.7.i686.rpm
ftp://updates.redhat.com/7.1/en/os/i686/kernel-bigmem-2.4.20-18.7.i686.rpm
Red Hat Linux 7.2:
SRPMS:
ftp://updates.redhat.com/7.2/en/os/SRPMS/kernel-2.4.20-18.7.src.rpm
ftp://updates.redhat.com/7.2/en/os/SRPMS/quota-3.06-9.7.src.rpm
athlon:
ftp://updates.redhat.com/7.2/en/os/athlon/kernel-2.4.20-18.7.athlon.rpm
ftp://updates.redhat.com/7.2/en/os/athlon/kernel-smp-2.4.20-18.7.athlon.rpm
i386:
ftp://updates.redhat.com/7.2/en/os/i386/kernel-2.4.20-18.7.i386.rpm
ftp://updates.redhat.com/7.2/en/os/i386/kernel-source-2.4.20-18.7.i386.rpm
ftp://updates.redhat.com/7.2/en/os/i386/kernel-doc-2.4.20-18.7.i386.rpm
ftp://updates.redhat.com/7.2/en/os/i386/kernel-BOOT-2.4.20-18.7.i386.rpm
ftp://updates.redhat.com/7.2/en/os/i386/quota-3.06-9.7.i386.rpm
i586:
ftp://updates.redhat.com/7.2/en/os/i586/kernel-2.4.20-18.7.i586.rpm
ftp://updates.redhat.com/7.2/en/os/i586/kernel-smp-2.4.20-18.7.i586.rpm
i686:
ftp://updates.redhat.com/7.2/en/os/i686/kernel-2.4.20-18.7.i686.rpm
ftp://updates.redhat.com/7.2/en/os/i686/kernel-smp-2.4.20-18.7.i686.rpm
ftp://updates.redhat.com/7.2/en/os/i686/kernel-bigmem-2.4.20-18.7.i686.rpm
Red Hat Linux 7.3:
SRPMS:
ftp://updates.redhat.com/7.3/en/os/SRPMS/kernel-2.4.20-18.7.src.rpm
ftp://updates.redhat.com/7.3/en/os/SRPMS/quota-3.06-9.7.src.rpm
athlon:
ftp://updates.redhat.com/7.3/en/os/athlon/kernel-2.4.20-18.7.athlon.rpm
ftp://updates.redhat.com/7.3/en/os/athlon/kernel-smp-2.4.20-18.7.athlon.rpm
i386:
ftp://updates.redhat.com/7.3/en/os/i386/kernel-2.4.20-18.7.i386.rpm
ftp://updates.redhat.com/7.3/en/os/i386/kernel-source-2.4.20-18.7.i386.rpm
ftp://updates.redhat.com/7.3/en/os/i386/kernel-doc-2.4.20-18.7.i386.rpm
ftp://updates.redhat.com/7.3/en/os/i386/kernel-BOOT-2.4.20-18.7.i386.rpm
ftp://updates.redhat.com/7.3/en/os/i386/quota-3.06-9.7.i386.rpm
i586:
ftp://updates.redhat.com/7.3/en/os/i586/kernel-2.4.20-18.7.i586.rpm
ftp://updates.redhat.com/7.3/en/os/i586/kernel-smp-2.4.20-18.7.i586.rpm
i686:
ftp://updates.redhat.com/7.3/en/os/i686/kernel-2.4.20-18.7.i686.rpm
ftp://updates.redhat.com/7.3/en/os/i686/kernel-smp-2.4.20-18.7.i686.rpm
ftp://updates.redhat.com/7.3/en/os/i686/kernel-bigmem-2.4.20-18.7.i686.rpm
Red Hat Linux 8.0:
SRPMS:
ftp://updates.redhat.com/8.0/en/os/SRPMS/kernel-2.4.20-18.8.src.rpm
athlon:
ftp://updates.redhat.com/8.0/en/os/athlon/kernel-2.4.20-18.8.athlon.rpm
来源: REDHAT
名称: RHSA-2003:187
链接:http://www.redhat.com/support/errata/RHSA-2003-187.html
来源: DEBIAN
名称: DSA-311
链接:http://www.debian.org/security/2003/dsa-311
来源: TURBO
名称: TLSA-2003-41
链接:http://www.turbolinux.com/security/TLSA-2003-41.txt
来源: REDHAT
名称: RHSA-2003:195
链接:http://www.redhat.com/support/errata/RHSA-2003-195.html
来源: DEBIAN
名称: DSA-442
链接:http://www.debian.org/security/2004/dsa-442
来源: DEBIAN
名称: DSA-336
链接:http://www.debian.org/security/2003/dsa-336
来源: DEBIAN
名称: DSA-332
链接:http://www.debian.org/security/2003/dsa-332
来源: DEBIAN
名称: DSA-312
链接:http://www.debian.org/security/2003/dsa-312
来源: MANDRAKE
名称: MDKSA-2003:074
链接:http://www.mandriva.com/security/advisories?name=MDKSA-2003:074
来源: MANDRAKE
名称: MDKSA-2003:066
链接:http://www.mandriva.com/security/advisories?name=MDKSA-2003:066
来源: US Government Resource: oval:org.mitre.oval:def:292
名称: oval:org.mitre.oval:def:292
链接:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:292