CVE:CVE-2023-28319
CNNVD:CNNVD-202305-1724
libcurl是一款用于从服务器传输数据或向服务器传输数据的工具。
libcurl 存在安全漏洞，该漏洞源于libcurl 提供了使用 SHA 256 哈希验证 SSH 服务器公钥的功能，当此检查失败时，libcurl 会在返回包含（现已释放的）哈希的错误消息之前释放指纹的内存，导致信息泄露。
solution:Upgrade haxx curl to a higher version than 8.1.0,and avoid the version (,8.1.0); Upgrade apple macos to a higher version than 11.7.9,12.6.8,13.5,and avoid the version [11.0,11.7.9),[12.0,12.6.8),[13.0,13.5); Upgrade netapp clustered_data_ontap to a higher version than -; Upgrade netapp ontap_antivirus_connector to a higher version than -; Upgrade netapp h300s_firmware to a higher version than -; Upgrade netapp h500s_firmware to a higher version than -; Upgrade netapp h700s_firmware to a higher version than -; Upgrade netapp h410s_firmware to a higher version than -