CVE:CVE-2021-22898
CNNVD:CNNVD-202105-1685
HAXX Haxx libcurl是瑞典HAXX公司的一个免费、开源的客户端URL传输库。该库支持FTP、FTPS、TFTP、HTTP等。
HAXX libcurl存在信息泄露漏洞，该漏洞源于libcurl可以将未初始化的数据从基于堆栈的缓冲区传递到服务器导致使用明文网络协议将敏感的内部信息泄露给服务。
solution:Upgrade haxx curl to a higher version than 7.76.1,and avoid the version [7.7,7.76.1]; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade fedoraproject fedora to a higher version than 33,34,and avoid the version 33,34; Upgrade oracle communications_cloud_native_core_binding_support_function to a higher version than 1.11.0,and avoid the version 1.11.0; Upgrade oracle communications_cloud_native_core_network_function_cloud_native_environment to a higher version than 1.10.0,and avoid the version 1.10.0; Upgrade oracle communications_cloud_native_core_network_repository_function to a higher version than 1.15.0,1.15.1,and avoid the version 1.15.0,1.15.1; Upgrade oracle communications_cloud_native_core_network_slice_selection_function to a higher version than 1.8.0,and avoid the version 1.8.0; Upgrade oracle communications_cloud_native_core_service_communication_proxy to a higher version than 1.15.0,and avoid the version 1.15.0; Upgrade oracle essbase to a higher version than 11.1.2.4.047,21.3,and avoid the version (,11.1.2.4.047),[21.0,21.3); Upgrade oracle mysql_server to a higher version than 5.7.34,8.0.25,and avoid the version (,5.7.34),[8.0.15,8.0.25); Upgrade siemens sinec_infrastructure_network_services to a higher version than 1.0.1.1,and avoid the version (,1.0.1.1)