CVE:CVE-2020-8231
CNNVD:CNNVD-202008-970
HAXX Haxx libcurl是瑞典HAXX公司的一个免费、开源的客户端URL传输库。该库支持FTP、FTPS、TFTP、HTTP等。
Haxx libcurl 7.29.0版本至7.71.1版本中存在资源管理错误漏洞。远程攻击者可利用该漏洞获取敏感信息。
solution:Upgrade haxx libcurl to a higher version than 7.71.1,and avoid the version [7.29.0,7.71.1]; Upgrade siemens sinec_infrastructure_network_services to a higher version than 1.0.1.1,and avoid the version (,1.0.1.1); Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0; Upgrade oracle communications_cloud_native_core_policy to a higher version than 1.14.0,and avoid the version 1.14.0