CVE:CVE-2015-3237
CNNVD:CNNVD-201506-360
Haxx curl和libcurl都是瑞典Haxx公司的产品。curl是一套利用URL语法在命令行下工作的文件传输工具。libcurl是一个免费、开源的客户端URL传输库。
Haxx cURL和libcurl 7.40.0版本至7.42.1版本的‘smb_request_state’函数存在安全漏洞。远程攻击者可借助特制的长度值和偏移值利用该漏洞获取内存中的敏感信息，或造成拒绝服务（越边界读取和崩溃）。
solution:Upgrade haxx curl to a higher version than 7.40.0,7.41.0,7.42.0,7.42.1,and avoid the version 7.40.0,7.41.0,7.42.0,7.42.1; Upgrade haxx libcurl to a higher version than 7.40.0,7.41.0,7.42.0,7.42.1,and avoid the version 7.40.0,7.41.0,7.42.0,7.42.1; Upgrade hp system_management_homepage to a higher version than 7.5.3.1,and avoid the version (,7.5.3.1]; Upgrade oracle enterprise_manager_ops_center to a higher version than 12.1.4,12.2.2,12.3.2,and avoid the version 12.1.4,12.2.2,12.3.2; Upgrade oracle glassfish_server to a higher version than 3.0.1,3.1.2,and avoid the version 3.0.1,3.1.2