CVE:CVE-2021-22901
CNNVD:CNNVD-202105-1683
HAXX Haxx curl是瑞典Haxx（HAXX）公司的一套利用URL语法在命令行下工作的文件传输工具。该工具支持文件上传和下载，并包含一个用于程序开发的libcurl（客户端URL传输库）。
Haxx curl 存在资源管理错误漏洞，该漏洞使用OpenSSL库作为TLS后端的curl版本可以在OpenSSL库执行TLS会话重新协商后使用已释放的内存。恶意的TLS服务器可能会利用这个缺陷来崩溃，或者使用curl库以客户端应用程序的特权执行任意代码。
solution:Upgrade haxx curl to a higher version than 7.76.1,and avoid the version [7.75.0,7.76.1]; Upgrade oracle communications_cloud_native_core_binding_support_function to a higher version than 1.11.0,and avoid the version 1.11.0; Upgrade oracle communications_cloud_native_core_network_function_cloud_native_environment to a higher version than 1.10.0,and avoid the version 1.10.0; Upgrade oracle communications_cloud_native_core_network_repository_function to a higher version than 1.15.0,1.15.1,and avoid the version 1.15.0,1.15.1; Upgrade oracle communications_cloud_native_core_network_slice_selection_function to a higher version than 1.8.0,and avoid the version 1.8.0; Upgrade oracle communications_cloud_native_core_service_communication_proxy to a higher version than 1.15.0,and avoid the version 1.15.0; Upgrade oracle essbase to a higher version than 11.1.2.4.047,21.3,and avoid the version (,11.1.2.4.047),[21.0,21.3); Upgrade oracle mysql_server to a higher version than 5.7.34,8.0.25,and avoid the version (,5.7.34],[8.0.0,8.0.25]; Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade netapp cloud_backup to a higher version than -; Upgrade netapp oncommand_insight to a higher version than -; Upgrade netapp oncommand_workflow_automation to a higher version than -; Upgrade netapp snapcenter to a higher version than -; Upgrade netapp solidfire,_enterprise_sds_&_hci_storage_node to a higher version than -; Upgrade netapp solidfire_&_hci_management_node to a higher version than -; Upgrade netapp solidfire_baseboard_management_controller_firmware to a higher version than -; Upgrade netapp hci_compute_node_firmware to a higher version than -; Upgrade netapp h300e_firmware to a higher version than -; Upgrade netapp h300s_firmware to a higher version than -; Upgrade netapp h410s_firmware to a higher version than -; Upgrade netapp h500e_firmware to a higher version than -; Upgrade netapp h500s_firmware to a higher version than -; Upgrade netapp h700e_firmware to a higher version than -; Upgrade netapp h700s_firmware to a higher version than -; Upgrade siemens sinec_infrastructure_network_services to a higher version than 1.0.1.1,and avoid the version (,1.0.1.1)