漏洞类别：Amazon Linux
漏洞等级： 
漏洞信息
Unspecified tests in Lynis before 2.5.0 allow local users to write to arbitrary files or possibly gain privileges via a symlink attack on a temporary file. (CVE-2017-8108 )
漏洞危害
Allows unauthorized disclosure of information; allows unauthorized modification; allows disruption of service.
解决方案
Please refer to Amazon advisory ALAS-2017-847 for affected packages and patching details, or update with your package manager.
Patch:
Following are links for downloading patches to fix the vulnerabilities:
ALAS-2017-847: Amazon Linux (lynis (2.5.0-1.6.amzn1) on src)
ALAS-2017-847: Amazon Linux (lynis (2.5.0-1.6.amzn1) on noarch)
0daybank
文章评论