CVE-2016-6252 安全漏洞阴影的Ubuntu安全通知 (USN-3276-1)

2017年5月11日 892点热度 0人点赞 0条评论

漏洞类别：Ubuntu

漏洞等级：

漏洞信息

Integer overflows in shadow utilities. A race condition in su.

漏洞危害

A local attacker could possibly cause them to crash or potentially gain privileges via crafted input. (CVE-2016-6252)

A local attacker could cause su to send SIGKILL to other processes with root privileges. (CVE-2017-2616)

解决方案

Refer to Ubuntu advisory USN-3276-1 for affected packages and patching details, or update with your package manager.

Patch:
Following are links for downloading patches to fix the vulnerabilities:

0day