CVE:CVE-2022-32208
CNNVD:CNNVD-202206-2573
curl是一款用于从服务器传输数据或向服务器传输数据的工具。
curl 7.16.4 版本之后包括 7.83.1 版本存在缓冲区错误漏洞，该漏洞源于错误地处理了某些 cookie。攻击者利用该漏洞可执行拒绝服务攻击。
solution:Upgrade haxx curl to a higher version than 7.84.0,and avoid the version [7.16.4,7.84.0); Upgrade fedoraproject fedora to a higher version than 35,and avoid the version 35; Upgrade debian debian_linux to a higher version than 10.0,11.0,and avoid the version 10.0,11.0; Upgrade netapp clustered_data_ontap to a higher version than -; Upgrade netapp element_software to a higher version than -; Upgrade netapp hci_management_node to a higher version than -; Upgrade netapp solidfire to a higher version than -; Upgrade netapp bootstrap_os to a higher version than -; Upgrade netapp h300s_firmware to a higher version than -; Upgrade netapp h500s_firmware to a higher version than -; Upgrade netapp h700s_firmware to a higher version than -; Upgrade netapp h410s_firmware to a higher version than -; Upgrade apple macos to a higher version than 13.0,and avoid the version (,13.0)