CVE:CVE-2021-22890
CNNVD:CNNVD-202103-1709
HAXX Haxx libcurl是瑞典HAXX公司的一个免费、开源的客户端URL传输库。该库支持FTP、FTPS、TFTP、HTTP等。
Haxx libcurl 存在安全漏洞，攻击者可利用该漏洞可以通过会话票证代理主机混淆来充当中间人。
solution:Upgrade haxx libcurl to a higher version than 7.75.0,and avoid the version [7.63.0,7.75.0]; Upgrade fedoraproject fedora to a higher version than 32,33,34,and avoid the version 32,33,34; Upgrade netapp hci_management_node to a higher version than -; Upgrade netapp solidfire to a higher version than -; Upgrade netapp hci_storage_node to a higher version than -; Upgrade broadcom fabric_operating_system to a higher version than -; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade siemens sinec_infrastructure_network_services to a higher version than 1.0.1.1,and avoid the version (,1.0.1.1); Upgrade oracle communications_billing_and_revenue_management to a higher version than 12.0.0.3.0,and avoid the version 12.0.0.3.0; Upgrade oracle essbase to a higher version than 21.2,and avoid the version 21.2