SUSE 內核多個漏洞

影響

• 阻斷服務
• 權限提升
• 遠端執行程式碼
• 繞過保安限制
• 資料洩露

受影響之系統或技術

• SUSE Linux Enterprise Server 12-SP5
• SUSE Linux Enterprise Workstation Extension 15-SP1
• SUSE Linux Enterprise Module for Live Patching 15-SP1
• SUSE Linux Enterprise Module for Legacy Software 15-SP1
• SUSE Linux Enterprise Module for Development Tools 15-SP1
• SUSE Linux Enterprise Module for Basesystem 15-SP1
• SUSE Linux Enterprise High Availability 15-SP1
• SUSE Linux Enterprise Workstation Extension 15-SP2
• SUSE Linux Enterprise Module for Live Patching 15-SP2
• SUSE Linux Enterprise Module for Legacy Software 15-SP2
• SUSE Linux Enterprise Module for Development Tools 15-SP2
• SUSE Linux Enterprise Module for Basesystem 15-SP2
• SUSE Linux Enterprise High Availability 15-SP2

解決方案

在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。

• 安裝供應商提供的修補程式, 詳情請參閱以下連結:
  https://www.suse.com/support/update/announcement/2020/suse-su-20203273-1/
  https://www.suse.com/support/update/announcement/2020/suse-su-20203272-1/
  https://www.suse.com/support/update/announcement/2020/suse-su-20203281-1/

漏洞識別碼

• CVE-2020-0430
• CVE-2020-12351
• CVE-2020-12352
• CVE-2020-14351
• CVE-2020-16120
• CVE-2020-25212
• CVE-2020-25285
• CVE-2020-25645
• CVE-2020-25656
• CVE-2020-27673
• CVE-2020-27675
• CVE-2020-8694

資料來源

• SUSE
• AusCERT

相關連結

• https://www.suse.com/support/update/announcement/2020/suse-su-20203273-1/
• https://www.suse.com/support/update/announcement/2020/suse-su-20203272-1/
• https://www.suse.com/support/update/announcement/2020/suse-su-20203281-1/
• https://www.auscert.org.au/bulletins/ESB-2020.4049/