发布日期：2004-02-18
更新日期：2004-02-25

受影响系统：

Linux kernel 2.4.9
Linux kernel 2.4.8
Linux kernel 2.4.7
Linux kernel 2.4.6
Linux kernel 2.4.5
Linux kernel 2.4.4
Linux kernel 2.4.3
Linux kernel 2.4.24
Linux kernel 2.4.23
Linux kernel 2.4.22
Linux kernel 2.4.21
Linux kernel 2.4.20
Linux kernel 2.4.2
Linux kernel 2.4.19
Linux kernel 2.4.17
Linux kernel 2.4.16
Linux kernel 2.4.15
Linux kernel 2.4.14
Linux kernel 2.4.13
Linux kernel 2.4.12
Linux kernel 2.4.11
Linux kernel 2.4.10
Linux kernel 2.4.1
Linux kernel 2.4
Linux kernel 2.4.18
    - Debian Linux 3.0
    - Mandrake Linux 8.2
    - Mandrake Linux 8.1
    - Mandrake Linux 8.0
    - RedHat Linux 8.0
    - RedHat Linux 7.3
    - SuSE Linux 8.2
    - SuSE Linux 8.1
    - SuSE Linux 8.0
    - SuSE Linux 7.3
    - SuSE Linux 7.2
    - SuSE Linux 7.1
    - Turbo Linux 7.0

描述：

---

BUGTRAQ  ID: 9695

Linux是一款开放源代码操作系统。

Linux内核在处理畸形ELF二进制文件时存在问题，本地攻击者可以利用这个漏洞进行拒绝服务攻击。

问题存在于execve()系统函数处理畸形ELF程序时触发，目前没有详细漏洞细节提供。

<*来源：SuSE Security Advisory
  
  链接：*>

建议：

---

厂商补丁：

S.u.S.E.
--------
S.u.S.E.已经为此发布了一个安全公告（SuSE-SA:2004:005）以及相应补丁:
SuSE-SA:2004:005：Linux Kernel

补丁下载：

Linux kernel 2.4.20:

SuSE Upgrade k_deflt-2.4.20-105.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/k_deflt-2.4.20-105.i586.rpm
Intel i386 Platform

SuSE Upgrade k_athlon-2.4.20-105.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/k_athlon-2.4.20-105.i586.rpm
Intel i386 Platform

SuSE Upgrade k_psmp-2.4.20-105.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/k_psmp-2.4.20-105.i586.rpm
Intel i386 Platform

SuSE Upgrade k_smp-2.4.20-105.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/8.2/rpm/i586/k_smp-2.4.20-105.i586.rpm
Intel i386 Platform

Linux kernel 2.4.21:

SuSE Upgrade k_deflt-2.4.21-192.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/k_deflt-2.4.21-192.i586.rpm
Intel i386 Platform

SuSE Upgrade k_smp-2.4.21-192.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/k_smp-2.4.21-192.i586.rpm
Intel i386 Platform

SuSE Upgrade k_smp4G-2.4.21-192.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/k_smp4G-2.4.21-192.i586.rpm
Intel i386 Platform

SuSE Upgrade k_um-2.4.21-192.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/k_um-2.4.21-192.i586.rpm
Intel i386 Platform

SuSE Upgrade k_athlon-2.4.21-192.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/9.0/rpm/i586/k_athlon-2.4.21-192.i586.rpm
Intel i386 Platform

SuSE Upgrade k_deflt-2.4.21-189.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/8.1/rpm/i586/k_deflt-2.4.21-189.i586.rpm
Intel i386 Platform/SuSE 8.1

SuSE Upgrade k_athlon-2.4.21-189.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/8.1/rpm/i586/k_athlon-2.4.21-189.i586.rpm
Intel i386 Platform/SuSE 8.1

SuSE Upgrade k_psmp-2.4.21-189.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/8.1/rpm/i586/k_psmp-2.4.21-189.i586.rpm
Intel i386 Platform/SuSE 8.1

SuSE Upgrade k_smp-2.4.21-189.i586.rpm
ftp://ftp.suse.com/pub/suse/i386/update/8.1/rpm/i586/k_smp-2.4.21-189.i586.rpm
Intel i386 Platform/SuSE 8.1

SuSE Upgrade k_deflt-2.4.21-201.x86_64.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/k_deflt-2.4.21-201.x86_64.rpm
x86_64/SuSE 9.0

SuSE Upgrade k_smp-2.4.21-201.x86_64.rpm
ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/k_smp-2.4.21-201.x86_64.rpm
x86_64/SuSE 9.0

浏览次数：3354
严重程度：0（网友投票）