CVE-2016-9555 Ubuntu Security Notification for Linux Vulnerabilities (USN-3187-1)

2017年2月12日 1115点热度 0人点赞 0条评论

漏洞类别：Ubuntu

漏洞等级：

漏洞信息

It was discovered that the SCTP implementation in the Linux kernel improperly handled validation of incoming data.

It was discovered that multiple memory leaks existed in the XFS implementation in the Linux kernel.

漏洞危害

A remote attacker could use this to cause a denial of service (system crash). (CVE-2016-9555)

A local attacker could use this to cause a denial of service (memory consumption). (CVE-2016-9685)

解决方案

Refer to Ubuntu advisory USN-3187-1 for affected packages and patching details, or update with your package manager.

Patch:
Following are links for downloading patches to fix the vulnerabilities:

0day