CVE-2017-1000253

Uzoq muddatli yadrolarini https://git.kernel.org/linus/a87938b2e246b81b4fb713edb371a9fa3c5c3c86 bilan tuzatmagan Linux distributivlari (2015-yil 14-aprelda tuzilgan). Yadroning ushbu zaifligi 2015-yil aprel oyida a87938b2e246b81b4fb713edb371a9fa3c5c3c86 (2015-yil may oyida Linux 3.10.77 versiyasiga ko‘chirilgan) tomonidan tuzatilgan, ammo u xavfsizlikka tahdid sifatida tan olinmagan. CONFIG_ARCH_BINFMT_ELF_RANDOMIZE_PIE yoqilgan va oddiy yuqoridan pastga manzillarni taqsimlash strategiyasi bilan load_elf_binary()

CVSS Vector

Manbalar

• http://www.securityfocus.com/bid/101010
• http://www.securitytracker.com/id/1039434
• https://access.redhat.com/errata/RHSA-2017:2793
• https://access.redhat.com/errata/RHSA-2017:2794
• https://access.redhat.com/errata/RHSA-2017:2795