1. 漏洞描述:
Haxxcurl是瑞典Haxx公司的一套利用URL语法在命令行下工作的文件传输工具。该工具支持文件上传和下载,并包含一个用于程序开发的libcurl(客户端URL传输库)。Haxxcurl7.20.0版本至7.71.0之前版本中存在安全漏洞。攻击者可利用该漏洞覆盖本地文件。
2. 解决方法
使用阿里云或者腾讯云的仓库,具体方法其他文章有说明文章来源:https://www.toymoban.com/news/detail-714296.html
sudo yum update -y curl libcurl
3. 修复过程
# sudo yum update -y curl libcurl
Loaded plugins: fastestmirror, langpacks
Loading mirror speeds from cached hostfile
Resolving Dependencies
--> Running transaction check
---> Package curl.x86_64 0:7.29.0-57.el7 will be updated
---> Package curl.x86_64 0:7.29.0-59.el7_9.1 will be an update
---> Package libcurl.x86_64 0:7.29.0-57.el7 will be updated
---> Package libcurl.x86_64 0:7.29.0-59.el7_9.1 will be an update
--> Finished Dependency Resolution
Dependencies Resolved
===========================================================================================================================================================================
Package Arch Version Repository Size
===========================================================================================================================================================================
Updating:
curl x86_64 7.29.0-59.el7_9.1 updates 271 k
libcurl x86_64 7.29.0-59.el7_9.1 updates 223 k
Transaction Summary
===========================================================================================================================================================================
Upgrade 2 Packages
Total download size: 494 k
Downloading packages:
Delta RPMs disabled because /usr/bin/applydeltarpm not installed.
(1/2): libcurl-7.29.0-59.el7_9.1.x86_64.rpm | 223 kB 00:00:00
(2/2): curl-7.29.0-59.el7_9.1.x86_64.rpm | 271 kB 00:00:00
---------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Total 1.6 MB/s | 494 kB 00:00:00
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
Updating : libcurl-7.29.0-59.el7_9.1.x86_64 1/4
Updating : curl-7.29.0-59.el7_9.1.x86_64 2/4
Cleanup : curl-7.29.0-57.el7.x86_64 3/4
Cleanup : libcurl-7.29.0-57.el7.x86_64 4/4
Verifying : curl-7.29.0-59.el7_9.1.x86_64 1/4
Verifying : libcurl-7.29.0-59.el7_9.1.x86_64 2/4
Verifying : curl-7.29.0-57.el7.x86_64 3/4
Verifying : libcurl-7.29.0-57.el7.x86_64 4/4
Updated:
curl.x86_64 0:7.29.0-59.el7_9.1 libcurl.x86_64 0:7.29.0-59.el7_9.1
Complete!
4. 重新扫描
文章来源地址https://www.toymoban.com/news/detail-714296.html
到了这里,关于漏洞修复--Haxx curl 安全漏洞 (CVE-2020-8177)的文章就介绍完了。如果您还想了解更多内容,请在右上角搜索TOY模板网以前的文章或继续浏览下面的相关文章,希望大家以后多多支持TOY模板网!