CVE:CVE-2022-32206
CNNVD:CNNVD-202206-2565
curl是一款用于从服务器传输数据或向服务器传输数据的工具。
curl 7.57.0版本到7.83.1版本存在资源管理错误漏洞，该漏洞源于curl支持的链式HTTP压缩算法缺少对于链接的数量限制。攻击者利用该漏洞可以会导致内存分配过大从而导致堆错误。
solution:Upgrade haxx curl to a higher version than 7.84.0,and avoid the version (,7.84.0); Upgrade fedoraproject fedora to a higher version than 35,and avoid the version 35; Upgrade debian debian_linux to a higher version than 10.0,11.0,and avoid the version 10.0,11.0; Upgrade netapp clustered_data_ontap to a higher version than -; Upgrade netapp element_software to a higher version than -; Upgrade netapp hci_management_node to a higher version than -; Upgrade netapp solidfire to a higher version than -; Upgrade netapp bootstrap_os to a higher version than -; Upgrade netapp h300s_firmware to a higher version than -; Upgrade netapp h500s_firmware to a higher version than -; Upgrade netapp h700s_firmware to a higher version than -; Upgrade netapp h410s_firmware to a higher version than -; Upgrade siemens scalance_sc622-2c_firmware to a higher version than 3.0,and avoid the version (,3.0); Upgrade siemens scalance_sc626-2c_firmware to a higher version than 3.0,and avoid the version (,3.0); Upgrade siemens scalance_sc632-2c_firmware to a higher version than 3.0,and avoid the version (,3.0); Upgrade siemens scalance_sc636-2c_firmware to a higher version than 3.0,and avoid the version (,3.0); Upgrade siemens scalance_sc642-2c_firmware to a higher version than 3.0,and avoid the version (,3.0); Upgrade siemens scalance_sc646-2c_firmware to a higher version than 3.0,and avoid the version (,3.0)