近日,Apache Tomcat官網通報了Apache Commons Fileupload 文件上傳組件問題,導致Apache Tomcat 7&8版本Dos存在安全漏洞,其中受影響的版本包括:
Versions Affected: - - Commons FileUpload 1.0 to 1.3 - - Apache Tomcat 8.0.0-RC1 to 8.0.1 - - Apache Tomcat 7.0.0 to 7.0.50 - - Apache Tomcat 6 and earlier are not affected
此次安全漏洞等級為重要。
修復方法:
Mitigation: Users of affected versions should apply one of the following mitigations - - Upgrade to Apache Commons FileUpload 1.3.1 or later once released - - Upgrade to Apache Tomcat 8.0.2 or later once released - - Upgrade to Apache Tomcat 7.0.51 or later once released - - Apply the appropriate patch - Commons FileUpload: <a >http://svn.apache.org/r1565143</a> - Tomcat 8: <a >http://svn.apache.org/r1565163</a> - Tomcat 7: <a >http://svn.apache.org/r1565169</a> - - Limit the size of the Content-Type header to less than 4091 bytes
下一篇 而立之年,開發者在害怕什么?