CVE:CVE-2017-1000376
CNNVD:CNNVD-201706-800
libffi是一个为各种调用和约束提供高级编程接口的库。
libffi 3.2.1版本中存在缓冲区错误漏洞。攻击者可利用该漏洞执行任意代码。
solution:Upgrade redhat enterprise_virtualization_server to a higher version than -; Upgrade redhat openshift to a higher version than 2.0,and avoid the version 2.0; Upgrade redhat enterprise_linux to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0