漏洞类别：Amazon Linux
漏洞等级： 
漏洞信息
A stack overflow vulnerability was found in _nss_dns_getnetbyname_r. On systems with nsswitch configured to include "networks: dns" with a privileged or network-facing service that would attempt to resolve user-provided network names, an attacker could provide an excessively long network name, resulting in stack corruption and code execution.
漏洞危害
Allows unauthorized disclosure of information; allows unauthorized modification; allows disruption of service.
解决方案
Please refer to Amazon advisory ALAS-2017-792 for affected packages and patching details, or update with your package manager.
Patch:
Following are links for downloading patches to fix the vulnerabilities:
ALAS-2017-792: Amazon Linux (glibc (2.17-157.169.amzn1) on i686)
ALAS-2017-792: Amazon Linux (glibc (2.17-157.169.amzn1) on x86_64)
ALAS-2017-792: Amazon Linux (glibc (2.17-157.169.amzn1) on src)
0day
文章评论