CVE:CVE-2016-5421
CNNVD:CNNVD-201608-218
Haxx libcurl是瑞典Haxx公司的一个免费、开源的客户端URL传输库。该库支持FTP、FTPS、TFTP、HTTP等。
Haxx libcurl 7.50.1之前的版本中存在释放后重用漏洞。攻击者可利用该漏洞控制被使用的连接。
solution:Upgrade opensuse leap to a higher version than 42.1,and avoid the version 42.1; Upgrade haxx libcurl to a higher version than 7.50.0,and avoid the version (,7.50.0]; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,16.04,and avoid the version 12.04,14.04,16.04; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade fedoraproject fedora to a higher version than 23,24,and avoid the version 23,24; Upgrade opensuse opensuse to a higher version than 13.2,and avoid the version 13.2