CVE:CVE-2018-1000007
CNNVD:CNNVD-201801-902
HAXX Haxx libcurl是瑞典HAXX公司的一个免费、开源的客户端URL传输库。该库支持FTP、FTPS、TFTP、HTTP等。
Haxx libcurl 7.1版本至7.57.0版本中存在信息泄露漏洞。攻击者可利用该漏洞获取敏感信息或数据，冒充客户端请求。
solution:Upgrade haxx curl to a higher version than 7.57.0,and avoid the version [7.1,7.57.0]; Upgrade debian debian_linux to a higher version than 7.0,8.0,9.0,and avoid the version 7.0,8.0,9.0; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,16.04,17.10,and avoid the version 12.04,14.04,16.04,17.10; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.4,and avoid the version 7.4; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.4,7.5,and avoid the version 7.4,7.5; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0; Upgrade fujitsu m10-1_firmware to a higher version than xcp2361,xcp3070,and avoid the version (,xcp2361),(,xcp3070); Upgrade fujitsu m10-4_firmware to a higher version than xcp2361,xcp3070,and avoid the version (,xcp2361),(,xcp3070); Upgrade fujitsu m10-4s_firmware to a higher version than xcp2361,xcp3070,and avoid the version (,xcp2361),(,xcp3070); Upgrade fujitsu m12-1_firmware to a higher version than xcp2361,xcp3070,and avoid the version (,xcp2361),(,xcp3070); Upgrade fujitsu m12-2_firmware to a higher version than xcp2361,xcp3070,and avoid the version (,xcp2361),(,xcp3070); Upgrade fujitsu m12-2s_firmware to a higher version than xcp2361,xcp3070,and avoid the version (,xcp2361),(,xcp3070)