CVE-2017-7468 Notification for cURL Ubuntu安全脆弱性 (USN-3262-1)

2017年5月3日 1202点热度 0人点赞 0条评论

漏洞类别：Ubuntu

漏洞等级：

漏洞信息

It was discovered that curl incorrectly handled client certificates when resuming a TLS session.

漏洞危害

A remote attacker could use this to hijack a previously authenticated connection.

解决方案

Refer to Ubuntu advisory USN-3262-1 for affected packages and patching details, or update with your package manager.

Patch:
Following are links for downloading patches to fix the vulnerabilities:

0day