CVE:CVE-2021-25134
CNNVD:CNNVD-202101-2547
HPE Cloudline CL5800 Gen9 Server等都是美国HPE公司的一款密集型云存储服务器设备。
HPE Cloudline 多款产品存在缓冲区错误漏洞，该漏洞源于spx_restservice setremoteimageinfo_func函数本地缓冲区溢出。以下产品及版本受到影响：HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware。
solution:Upgrade hpe cloudline_cl3100_gen10_server_firmware to a higher version than 1.08.0.0,1.10.0.0,and avoid the version 1.08.0.0,1.10.0.0; Upgrade hpe cloudline_cl4100_gen10_server_firmware to a higher version than 1.08.0.0,1.10.0.0,and avoid the version 1.08.0.0,1.10.0.0; Upgrade hpe cloudline_cl5200_gen9_server_firmware to a higher version than 1.07.0.0,and avoid the version 1.07.0.0; Upgrade hpe cloudline_cl5800_gen10_server_firmware to a higher version than 1.08.0.0,and avoid the version 1.08.0.0; Upgrade hpe cloudline_cl5800_gen9_server_firmware to a higher version than 1.09.0.0,and avoid the version 1.09.0.0