Linux ‘nls_ascii.c’ 缓冲区溢出漏洞

漏洞信息详情

Linux ‘nls_ascii.c’ 缓冲区溢出漏洞

• CNNVD编号：CNNVD-200503-064
• 危害等级： 高危
  
  
• CVE编号：
  CVE-2005-0177
  
• 漏洞类型：
  
  
  缓冲区溢出
  
• 发布时间：
  
  2005-03-07
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2005-10-20
  
• 厂        商：
  
  linux
• 漏洞来源：
  Discovery of these…

Linux 2.6.8.1之前版本中的nls_ascii.c使用不当的表大小，远程攻击者可以通过缓冲区溢出实施拒绝服务攻击(内核崩溃)。

目前厂商已经发布了升级补丁以修复这个安全问题，补丁下载链接：

RedHat Fedora Core1

RedHat kernel-2.4.22-1.2199.5.legacy.nptl.athlon.rpm

Fedora Core 1:

http://download.fedoralegacy.org/fedora/1/updates/i386/kernel-2.4.22-1 .2199.5.legacy.nptl.athlon.rpm

RedHat kernel-2.4.22-1.2199.5.legacy.nptl.i586.rpm

Fedora Core 1:

http://download.fedoralegacy.org/fedora/1/updates/i386/kernel-2.4.22-1 .2199.5.legacy.nptl.i586.rpm

RedHat kernel-2.4.22-1.2199.5.legacy.nptl.i686.rpm

Fedora Core 1:

http://download.fedoralegacy.org/fedora/1/updates/i386/kernel-2.4.22-1 .2199.5.legacy.nptl.i686.rpm

RedHat kernel-BOOT-2.4.22-1.2199.5.legacy.nptl.i386.rpm

Fedora Core 1:

http://download.fedoralegacy.org/fedora/1/updates/i386/kernel-BOOT-2.4 .22-1.2199.5.legacy.nptl.i386.rpm

RedHat kernel-doc-2.4.22-1.2199.5.legacy.nptl.i386.rpm

Fedora Core 1:

http://download.fedoralegacy.org/fedora/1/updates/i386/kernel-doc-2.4. 22-1.2199.5.legacy.nptl.i386.rpm

RedHat kernel-smp-2.4.22-1.2199.5.legacy.nptl.athlon.rpm

Fedora Core 1:

http://download.fedoralegacy.org/fedora/1/updates/i386/kernel-smp-2.4. 22-1.2199.5.legacy.nptl.athlon.rpm

RedHat kernel-smp-2.4.22-1.2199.5.legacy.nptl.i586.rpm

Fedora Core 1:

http://download.fedoralegacy.org/fedora/1/updates/i386/kernel-smp-2.4. 22-1.2199.5.legacy.nptl.i586.rpm

RedHat kernel-smp-2.4.22-1.2199.5.legacy.nptl.i686.rpm

Fedora Core 1:

http://download.fedoralegacy.org/fedora/1/updates/i386/kernel-smp-2.4. 22-1.2199.5.legacy.nptl.i686.rpm

RedHat kernel-source-2.4.22-1.2199.5.legacy.nptl.i386.rpm

Fedora Core 1:

http://download.fedoralegacy.org/fedora/1/updates/i386/kernel-source-2 .4.22-1.2199.5.legacy.nptl.i386.rpm

来源: REDHAT

名称: RHSA-2005:092

链接:http://www.redhat.com/support/errata/RHSA-2005-092.html

来源: linux.bkbits.net:8080

链接:http://linux.bkbits.net:8080/linux-2.6/cset@41e2bfbeOiXFga62XrBhzm7Kv9QDmQ

来源: CONECTIVA

名称: CLA-2005:930

链接:http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930

来源: BID

名称: 12598

链接:http://www.securityfocus.com/bid/12598

来源: BUGTRAQ

名称: 20050215 [USN-82-1] Linux kernel vulnerabilities

链接:http://marc.theaimsgroup.com/?l=full-disclosure&m=110846102231365&w=2