SUSE Linux 內核多個漏洞

最後更新 2024年05月31日發佈日期: 2024年02月07日 484 觀看次數

風險: 中度風險

類型: 操作系統 - LINUX

於 SUSE Linux 內核發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發阻斷服務狀況、權限提升、遠端執行任意程式碼及敏感資料洩露。

注意：

CVE-2024-1086 正在被廣泛利用。它與 netfilter: nf_tables 元件中的釋放後使用漏洞有關。本地攻擊者可利用此漏洞將一般使用者的權限提升至Root權限。風險等級仍為中度風險。

[更新於 2024-02-14]

更新受影響之系統或技術、解決方案、漏洞識別碼及相關連結。

[更新於 2024-02-16]

更新影響、受影響之系統或技術、解決方案、漏洞識別碼及相關連結。

[更新於 2024-02-28]

更新受影響之系統或技術、解決方案、漏洞識別碼及相關連結。

[更新於 2024-05-31]

更新描述。

影響

阻斷服務
遠端執行程式碼
權限提升
資料洩露

受影響之系統或技術

Basesystem Module 15-SP5
Development Tools Module 15-SP5
Legacy Module 15-SP5
Public Cloud Module 15-SP4
Public Cloud Module 15-SP5
SUSE Enterprise Storage 7.1
SUSE Linux Enterprise Desktop 15 SP4 LTSS 15-SP4
SUSE Linux Enterprise Desktop 15 SP5
SUSE Linux Enterprise High Availability Extension 12 SP5
SUSE Linux Enterprise High Availability Extension 15 SP2
SUSE Linux Enterprise High Availability Extension 15 SP3
SUSE Linux Enterprise High Availability Extension 15 SP4
SUSE Linux Enterprise High Availability Extension 15 SP5
SUSE Linux Enterprise High Performance Computing 12 SP5
SUSE Linux Enterprise High Performance Computing 15 SP1
SUSE Linux Enterprise High Performance Computing 15 SP2
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2
SUSE Linux Enterprise High Performance Computing 15 SP3
SUSE Linux Enterprise High Performance Computing 15 SP4
SUSE Linux Enterprise High Performance Computing 15 SP5
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4
SUSE Linux Enterprise High Performance Computing LTSS 15 SP3
SUSE Linux Enterprise High Performance Computing LTSS 15 SP4
SUSE Linux Enterprise Live Patching 12-SP5
SUSE Linux Enterprise Live Patching 15-SP1
SUSE Linux Enterprise Live Patching 15-SP2
SUSE Linux Enterprise Live Patching 15-SP3
SUSE Linux Enterprise Live Patching 15-SP4
SUSE Linux Enterprise Live Patching 15-SP5
SUSE Linux Enterprise Micro 5.1
SUSE Linux Enterprise Micro 5.2
SUSE Linux Enterprise Micro 5.3
SUSE Linux Enterprise Micro 5.4
SUSE Linux Enterprise Micro 5.5
SUSE Linux Enterprise Micro for Rancher 5.2
SUSE Linux Enterprise Micro for Rancher 5.3
SUSE Linux Enterprise Micro for Rancher 5.4
SUSE Linux Enterprise Real Time 12 SP5
SUSE Linux Enterprise Real Time 15 SP4
SUSE Linux Enterprise Real Time 15 SP5
SUSE Linux Enterprise Server 12 SP5
SUSE Linux Enterprise Server 15 SP1
SUSE Linux Enterprise Server 15 SP2
SUSE Linux Enterprise Server 15 SP2 Business Critical Linux 15-SP2
SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2
SUSE Linux Enterprise Server 15 SP3
SUSE Linux Enterprise Server 15 SP3 Business Critical Linux 15-SP3
SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3
SUSE Linux Enterprise Server 15 SP4
SUSE Linux Enterprise Server 15 SP4 LTSS 15-SP4
SUSE Linux Enterprise Server 15 SP5
SUSE Linux Enterprise Server for SAP Applications 12 SP5
SUSE Linux Enterprise Server for SAP Applications 15 SP1
SUSE Linux Enterprise Server for SAP Applications 15 SP2
SUSE Linux Enterprise Server for SAP Applications 15 SP3
SUSE Linux Enterprise Server for SAP Applications 15 SP4
SUSE Linux Enterprise Server for SAP Applications 15 SP5
SUSE Linux Enterprise Software Development Kit 12 SP5
SUSE Linux Enterprise Workstation Extension 12 12-SP5
SUSE Linux Enterprise Workstation Extension 15 SP5
SUSE Manager Proxy 4.1
SUSE Manager Proxy 4.2
SUSE Manager Proxy 4.3
SUSE Manager Retail Branch Server 4.1
SUSE Manager Retail Branch Server 4.2
SUSE Manager Retail Branch Server 4.3
SUSE Manager Server 4.1
SUSE Manager Server 4.2
SUSE Manager Server 4.3
SUSE Real Time Module 15-SP5
openSUSE Leap 15.3
openSUSE Leap 15.4
openSUSE Leap 15.5
openSUSE Leap Micro 5.3
openSUSE Leap Micro 5.4

解決方案

在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。

安裝供應商提供的修補程式：

漏洞識別碼

CVE-2021-33631
CVE-2022-2196
CVE-2022-3523
CVE-2022-4269
CVE-2022-4744
CVE-2022-36280
CVE-2022-38096
CVE-2022-45884
CVE-2022-45885
CVE-2022-45886
CVE-2022-45887
CVE-2022-45919
CVE-2023-0045
CVE-2023-0122
CVE-2023-0179
CVE-2023-0394
CVE-2023-0461
CVE-2023-0469
CVE-2023-0590
CVE-2023-0597
CVE-2023-1075
CVE-2023-1076
CVE-2023-1077
CVE-2023-1079
CVE-2023-1095
CVE-2023-1118
CVE-2023-1380
CVE-2023-1382
CVE-2023-1513
CVE-2023-1582
CVE-2023-1583
CVE-2023-1611
CVE-2023-1637
CVE-2023-1652
CVE-2023-1670
CVE-2023-1829
CVE-2023-1838
CVE-2023-1855
CVE-2023-1989
CVE-2023-1998
CVE-2023-2002
CVE-2023-2124
CVE-2023-2156
CVE-2023-2162
CVE-2023-2176
CVE-2023-2235
CVE-2023-2269
CVE-2023-2483
CVE-2023-2513
CVE-2023-3006
CVE-2023-3141
CVE-2023-3161
CVE-2023-4921
CVE-2023-5178
CVE-2023-6040
CVE-2023-6176
CVE-2023-6356
CVE-2023-6531
CVE-2023-6535
CVE-2023-6536
CVE-2023-6610
CVE-2023-6915
CVE-2023-6932
CVE-2023-21102
CVE-2023-21106
CVE-2023-22995
CVE-2023-22998
CVE-2023-23000
CVE-2023-23001
CVE-2023-23004
CVE-2023-23006
CVE-2023-23454
CVE-2023-23455
CVE-2023-23559
CVE-2023-25012
CVE-2023-26545
CVE-2023-28327
CVE-2023-28410
CVE-2023-28464
CVE-2023-30456
CVE-2023-30772
CVE-2023-31084
CVE-2023-31436
CVE-2023-32233
CVE-2023-33288
CVE-2023-33951
CVE-2023-33952
CVE-2023-39198
CVE-2023-46838
CVE-2023-47233
CVE-2023-51042
CVE-2023-51043
CVE-2023-51780
CVE-2023-51782
CVE-2024-0340
CVE-2024-0565
CVE-2024-0641
CVE-2024-0775
CVE-2024-1085
CVE-2024-1086
CVE-2024-24860

資料來源

SUSE