CVE:CVE-2018-12910
CNNVD:CNNVD-201807-329
libsoup是一款GNOME的HTTP客户端/服务器库。
GNOME libsoup中的soup-cookie-jar.c文件的soup_cookie_jar_get_cookies存在缓冲区错误漏洞。攻击者可借助空的主机名利用该漏洞造成拒绝服务。
solution:Upgrade gnome libsoup to a higher version than 2.63.2,and avoid the version 2.63.2; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,17.10,18.04,and avoid the version 14.04,16.04,17.10,18.04; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade redhat ansible_tower to a higher version than 3.3,and avoid the version 3.3; Upgrade redhat openshift_container_platform to a higher version than 3.11,and avoid the version 3.11; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0; Upgrade opensuse leap to a higher version than 15.0,and avoid the version 15.0