漏洞信息详情

Linux内核碎片重组远程拒绝服务攻击漏洞

• CNNVD编号：CNNVD-200306-061
• 危害等级： 低危
  
• CVE编号： CVE-2003-0364
• 漏洞类型： 设计错误
• 发布时间： 2003-06-16
• 威胁类型： 远程
• 更新时间： 2005-10-20
• 厂        商： redhat
• 漏洞来源： Red Hat Security A...

漏洞简介

Linux是一款免费开放源代码的操作系统。 Linux不正确处理部分类型的网络通信，远程攻击者可以利用这个漏洞使系统消耗过多资源，造成拒绝服务。 问题存在与Linux内核处理TCP/IP碎片重组机制中，目前没有提供详细漏洞细节。

漏洞公告

厂商补丁： RedHat ------ RedHat已经为此发布了一个安全公告(RHSA-2003:187-01)以及相应补丁:

RHSA-2003:187-01：Updated 2.4 kernel fixes vulnerabilities and driver bugs

链接：https://www.redhat.com/support/errata/RHSA-2003-187.HTML

补丁下载：

Red Hat Linux 7.1:

SRPMS:

ftp://updates.redhat.com/7.1/en/os/SRPMS/kernel-2.4.20-18.7.src.rpm

ftp://updates.redhat.com/7.1/en/os/SRPMS/quota-3.06-9.71.src.rpm

athlon:

ftp://updates.redhat.com/7.1/en/os/athlon/kernel-2.4.20-18.7.athlon.rpm

ftp://updates.redhat.com/7.1/en/os/athlon/kernel-smp-2.4.20-18.7.athlon.rpm

i386:

ftp://updates.redhat.com/7.1/en/os/i386/kernel-2.4.20-18.7.i386.rpm

ftp://updates.redhat.com/7.1/en/os/i386/kernel-source-2.4.20-18.7.i386.rpm

ftp://updates.redhat.com/7.1/en/os/i386/kernel-doc-2.4.20-18.7.i386.rpm

ftp://updates.redhat.com/7.1/en/os/i386/kernel-BOOT-2.4.20-18.7.i386.rpm

ftp://updates.redhat.com/7.1/en/os/i386/quota-3.06-9.71.i386.rpm

i586:

ftp://updates.redhat.com/7.1/en/os/i586/kernel-2.4.20-18.7.i586.rpm

ftp://updates.redhat.com/7.1/en/os/i586/kernel-smp-2.4.20-18.7.i586.rpm

i686:

ftp://updates.redhat.com/7.1/en/os/i686/kernel-2.4.20-18.7.i686.rpm

ftp://updates.redhat.com/7.1/en/os/i686/kernel-smp-2.4.20-18.7.i686.rpm

ftp://updates.redhat.com/7.1/en/os/i686/kernel-bigmem-2.4.20-18.7.i686.rpm

Red Hat Linux 7.2:

SRPMS:

ftp://updates.redhat.com/7.2/en/os/SRPMS/kernel-2.4.20-18.7.src.rpm

ftp://updates.redhat.com/7.2/en/os/SRPMS/quota-3.06-9.7.src.rpm

athlon:

ftp://updates.redhat.com/7.2/en/os/athlon/kernel-2.4.20-18.7.athlon.rpm

ftp://updates.redhat.com/7.2/en/os/athlon/kernel-smp-2.4.20-18.7.athlon.rpm

i386:

ftp://updates.redhat.com/7.2/en/os/i386/kernel-2.4.20-18.7.i386.rpm

ftp://updates.redhat.com/7.2/en/os/i386/kernel-source-2.4.20-18.7.i386.rpm

ftp://updates.redhat.com/7.2/en/os/i386/kernel-doc-2.4.20-18.7.i386.rpm

ftp://updates.redhat.com/7.2/en/os/i386/kernel-BOOT-2.4.20-18.7.i386.rpm

ftp://updates.redhat.com/7.2/en/os/i386/quota-3.06-9.7.i386.rpm

i586:

ftp://updates.redhat.com/7.2/en/os/i586/kernel-2.4.20-18.7.i586.rpm

ftp://updates.redhat.com/7.2/en/os/i586/kernel-smp-2.4.20-18.7.i586.rpm

i686:

ftp://updates.redhat.com/7.2/en/os/i686/kernel-2.4.20-18.7.i686.rpm

ftp://updates.redhat.com/7.2/en/os/i686/kernel-smp-2.4.20-18.7.i686.rpm

ftp://updates.redhat.com/7.2/en/os/i686/kernel-bigmem-2.4.20-18.7.i686.rpm

Red Hat Linux 7.3:

SRPMS:

ftp://updates.redhat.com/7.3/en/os/SRPMS/kernel-2.4.20-18.7.src.rpm

ftp://updates.redhat.com/7.3/en/os/SRPMS/quota-3.06-9.7.src.rpm

athlon:

ftp://updates.redhat.com/7.3/en/os/athlon/kernel-2.4.20-18.7.athlon.rpm

ftp://updates.redhat.com/7.3/en/os/athlon/kernel-smp-2.4.20-18.7.athlon.rpm

i386:

ftp://updates.redhat.com/7.3/en/os/i386/kernel-2.4.20-18.7.i386.rpm

ftp://updates.redhat.com/7.3/en/os/i386/kernel-source-2.4.20-18.7.i386.rpm

ftp://updates.redhat.com/7.3/en/os/i386/kernel-doc-2.4.20-18.7.i386.rpm

ftp://updates.redhat.com/7.3/en/os/i386/kernel-BOOT-2.4.20-18.7.i386.rpm

ftp://updates.redhat.com/7.3/en/os/i386/quota-3.06-9.7.i386.rpm

i586:

ftp://updates.redhat.com/7.3/en/os/i586/kernel-2.4.20-18.7.i586.rpm

ftp://updates.redhat.com/7.3/en/os/i586/kernel-smp-2.4.20-18.7.i586.rpm

i686:

ftp://updates.redhat.com/7.3/en/os/i686/kernel-2.4.20-18.7.i686.rpm

ftp://updates.redhat.com/7.3/en/os/i686/kernel-smp-2.4.20-18.7.i686.rpm

ftp://updates.redhat.com/7.3/en/os/i686/kernel-bigmem-2.4.20-18.7.i686.rpm

Red Hat Linux 8.0:

SRPMS:

ftp://updates.redhat.com/8.0/en/os/SRPMS/kernel-2.4.20-18.8.src.rpm

athlon:

ftp://updates.redhat.com/8.0/en/os/athlon/kernel-2.4.20-18.8.athlon.rpm

参考网址

来源: REDHAT 名称: RHSA-2003:187 链接:http://www.redhat.com/support/errata/RHSA-2003-187.HTML 来源: DEBIAN 名称: DSA-311 链接:http://www.debian.org/security/2003/dsa-311 来源: TURBO 名称: TLSA-2003-41 链接:http://www.turbolinux.com/security/TLSA-2003-41.txt 来源: REDHAT 名称: RHSA-2003:198 链接:http://www.redhat.com/support/errata/RHSA-2003-198.HTML 来源: REDHAT 名称: RHSA-2003:195 链接:http://www.redhat.com/support/errata/RHSA-2003-195.HTML 来源: DEBIAN 名称: DSA-442 链接:http://www.debian.org/security/2004/dsa-442 来源: DEBIAN 名称: DSA-336 链接:http://www.debian.org/security/2003/dsa-336 来源: DEBIAN 名称: DSA-332 链接:http://www.debian.org/security/2003/dsa-332 来源: DEBIAN 名称: DSA-312 链接:http://www.debian.org/security/2003/dsa-312 来源: US Government Resource: oval:org.mitre.oval:def:295 名称: oval:org.mitre.oval:def:295 链接:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:295

受影响实体

• Redhat Linux:7.3  
• Redhat Linux:7.2  
• Redhat Linux:7.1  
• Redhat Linux:8.0  
• Redhat Linux:9.0  

补丁

暂无