CVE:CVE-2019-3833
CNNVD:CNNVD-201903-479
Openwsman是一套开源的WEB服务管理规范实现。
Openwsman 2.6.9及之前版本中的process_connection()存在资源管理错误漏洞。远程攻击者可通过发送特制的HTTP请求利用该漏洞造成拒绝服务。
solution:Upgrade openwsman_project openwsman to a higher version than 2.6.9,and avoid the version (,2.6.9]; Upgrade fedoraproject fedora to a higher version than 28,29,30,and avoid the version 28,29,30; Upgrade opensuse leap to a higher version than 15.0,42.3,and avoid the version 15.0,42.3