CVE:CVE-2020-8285
CNNVD:CNNVD-202012-756
HAXX Haxx libcurl是瑞典HAXX公司的一个免费、开源的客户端URL传输库。该库支持FTP、FTPS、TFTP、HTTP等。
HAXX libcurl 存在安全漏洞，攻击者可利用该漏洞通过libcurl的FTP通配符触发致命错误，从而触发拒绝服务。
solution:Upgrade haxx libcurl to a higher version than 7.74.0,and avoid the version [7.21.0,7.74.0); Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade fedoraproject fedora to a higher version than 32,33,and avoid the version 32,33; Upgrade netapp clustered_data_ontap to a higher version than -; Upgrade netapp hci_management_node to a higher version than -; Upgrade netapp solidfire to a higher version than -; Upgrade netapp hci_bootstrap_os to a higher version than -; Upgrade netapp hci_storage_node_firmware to a higher version than -; Upgrade apple mac_os_x to a higher version than 10.14.6,10.15.7,10.14.6,10.14.6:security_update_2019-001,10.14.6:security_update_2019-002,10.14.6:security_update_2020-001,10.14.6:security_update_2020-002,10.14.6:security_update_2020-003,10.14.6:security_update_2020-004,10.14.6:security_update_2020-005,10.14.6:security_update_2020-006,10.14.6:security_update_2020-007,10.14.6:security_update_2021-001,10.15.7,10.15.7:security_update_2020-001,10.15.7:security_update_2021-001,10.15.7:supplemental_update,and avoid the version (,10.14.6),[10.15,10.15.7),10.14.6,10.14.6:security_update_2019-001,10.14.6:security_update_2019-002,10.14.6:security_update_2020-001,10.14.6:security_update_2020-002,10.14.6:security_update_2020-003,10.14.6:security_update_2020-004,10.14.6:security_update_2020-005,10.14.6:security_update_2020-006,10.14.6:security_update_2020-007,10.14.6:security_update_2021-001,10.15.7,10.15.7:security_update_2020-001,10.15.7:security_update_2021-001,10.15.7:supplemental_update; Upgrade apple macos to a higher version than 11.3,and avoid the version [11.0,11.3); Upgrade oracle communications_billing_and_revenue_management to a higher version than 12.0.0.3.0,and avoid the version 12.0.0.3.0; Upgrade oracle communications_cloud_native_core_policy to a higher version than 1.14.0,and avoid the version 1.14.0; Upgrade oracle essbase to a higher version than 21.2,and avoid the version 21.2; Upgrade oracle peoplesoft_enterprise_peopletools to a higher version than 8.58,and avoid the version 8.58; Upgrade fujitsu m10-1_firmware to a higher version than xcp2410,xcp3110,and avoid the version (,xcp2410),(,xcp3110); Upgrade fujitsu m10-4_firmware to a higher version than xcp2410,xcp3110,and avoid the version (,xcp2410),(,xcp3110); Upgrade fujitsu m10-4s_firmware to a higher version than xcp2410,xcp3110,and avoid the version (,xcp2410),(,xcp3110); Upgrade fujitsu m12-1_firmware to a higher version than xcp2410,xcp3110,and avoid the version (,xcp2410),(,xcp3110); Upgrade fujitsu m12-2_firmware to a higher version than xcp2410,xcp3110,and avoid the version (,xcp2410),(,xcp3110); Upgrade fujitsu m12-2s_firmware to a higher version than xcp2410,xcp3110,and avoid the version (,xcp2410),(,xcp3110); Upgrade siemens sinec_infrastructure_network_services to a higher version than 1.0.1.1,and avoid the version (,1.0.1.1)