CVE-2017-2616 Amazon Linux Security Advisory for util-linux: ALAS-2017-823

漏洞类别:Amazon Linux

漏洞等级:

漏洞信息

Sending SIGKILL to other processes with root privileges via su:
A race condition was found in the way su handled the management of child processes. A local authenticated attacker could use this flaw to kill other processes with root privileges under specific conditions.(CVE-2017-2616 )

漏洞危害

Allows unauthorized disclosure of information; allows unauthorized modification; allows disruption of service.

解决方案

Please refer to Amazon advisory ALAS-2017-823 for affected packages and patching details, or update with your package manager.

Patch:
Following are links for downloading patches to fix the vulnerabilities:

ALAS-2017-823: Amazon Linux (util-linux (2.23.2-33.28.amzn1) on i686)

ALAS-2017-823: Amazon Linux (util-linux (2.23.2-33.28.amzn1) on x86_64)

ALAS-2017-823: Amazon Linux (util-linux (2.23.2-33.28.amzn1) on src)

0day

发表评论