openwsman-2.6.5-7.el8
エラータID: AXSA:2021-1338:01
リリース日:
2021/01/29 Friday - 10:07
題名:
openwsman-2.6.5-7.el8
影響のあるチャネル:
Asianux Server 8 for x86_64
Severity:
Moderate
Description:
以下項目について対処しました。
[Security Fix]
- Openwsman には、認証されていないリモートの攻撃者が、
巧妙に細工された HTTP リクエストを介して openwsman サーバーの
サービス拒否を引き起こすことのできる脆弱性があります。
(CVE-2019-3833)
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2019-3833
Openwsman, versions up to and including 2.6.9, are vulnerable to infinite loop in process_connection() when parsing specially crafted HTTP requests. A remote, unauthenticated attacker can exploit this vulnerability by sending malicious HTTP request to cause denial of service to openwsman server.
Openwsman, versions up to and including 2.6.9, are vulnerable to infinite loop in process_connection() when parsing specially crafted HTTP requests. A remote, unauthenticated attacker can exploit this vulnerability by sending malicious HTTP request to cause denial of service to openwsman server.
追加情報:
N/A
ダウンロード:
SRPMS
- openwsman-2.6.5-7.el8.src.rpm
MD5: 23b2d2aeafae68f4341dcce7deffdf99
SHA-256: 3e7583515a04a5aa5c1931f2d03c4b7dc2a5d9796455df9cfdad589971a2ec8e
Size: 528.04 kB
Asianux Server 8 for x86_64
- libwsman1-2.6.5-7.el8.x86_64.rpm
MD5: f7a6849d3d3c564040d4ec4befbe8fd9
SHA-256: 50dd7eedbed542b3db4df9aa49a3683b339c542d57775f82d8d281233277c0f0
Size: 140.69 kB - openwsman-client-2.6.5-7.el8.x86_64.rpm
MD5: e3fde7a16699c906539d9214507e8b87
SHA-256: ca8b67c7f130e059c790fabf100a0a110f1d1788992beeee47091956b6ad61b5
Size: 51.67 kB - openwsman-python3-2.6.5-7.el8.x86_64.rpm
MD5: af52d8d57146e296a53e327c60135546
SHA-256: c9de7c0be0cf5d3f330f4c06af95ddb88e11e96963999cc3be16400810e3072b
Size: 120.96 kB - openwsman-server-2.6.5-7.el8.x86_64.rpm
MD5: 8fbb86b149ffba55699992960b3acfaa
SHA-256: a2ec8051055d1da6958956cbc694a750e55c11a354c07dd76f7ed5c5b1af8f62
Size: 176.98 kB - libwsman1-2.6.5-7.el8.i686.rpm
MD5: 5f8e3043f687939a92d0e5d0c20b7582
SHA-256: 262060418a15c7216b26fdc760b6907059c9750918f9d4bf9048936d70338174
Size: 153.12 kB - openwsman-client-2.6.5-7.el8.i686.rpm
MD5: 178164098bb331000913123dfe59a440
SHA-256: cd6eb5c45c43f6525956d25898fe387a8a46d4784eaa2e73c335aee02a64064e
Size: 53.14 kB - openwsman-server-2.6.5-7.el8.i686.rpm
MD5: a6d3617cac0043d8462c91a80312cbbc
SHA-256: 6d17bafa39b0d262147000ceed986f67d52aab6970d27544c02dca7346a3b539
Size: 184.08 kB