CVE:CVE-2018-1000121
CNNVD:CNNVD-201803-462
Haxx curl是瑞典Haxx公司的一套利用URL语法在命令行下工作的文件传输工具，该工具支持文件上传和下载，并包含一个用于程序开发的libcurl（客户端URL传输库）。
Haxx curl 7.21.0版本至7.58.0版本中的LDAP代码存在安全漏洞。攻击者可利用该漏洞造成拒绝服务（空指针逆向引用）。
solution:Upgrade debian debian_linux to a higher version than 7.0,8.0,9.0,and avoid the version 7.0,8.0,9.0; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,16.04,17.10,and avoid the version 12.04,14.04,16.04,17.10; Upgrade haxx curl to a higher version than 7.58.0,and avoid the version [7.21.0,7.58.0]; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0; Upgrade oracle communications_webrtc_session_controller to a higher version than 7.2,and avoid the version (,7.2); Upgrade oracle enterprise_manager_ops_center to a higher version than 12.2.2,12.3.3,and avoid the version 12.2.2,12.3.3; Upgrade oracle peoplesoft_enterprise_peopletools to a higher version than 8.55,8.56,8.57,and avoid the version 8.55,8.56,8.57