{"id":6982,"date":"2016-12-13T11:12:22","date_gmt":"2016-12-13T03:12:22","guid":{"rendered":"https:\/\/aqzt.com\/6982.html"},"modified":"2016-12-13T11:12:22","modified_gmt":"2016-12-13T03:12:22","slug":"apache-tomcat-%e4%bf%a1%e6%81%af%e6%b3%84%e9%9c%b2%e6%bc%8f%e6%b4%9e%ef%bc%88cve-2016-8745%ef%bc%89","status":"publish","type":"post","link":"https:\/\/aqzt.com\/6982.html","title":{"rendered":"Apache Tomcat \u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\uff08CVE-2016-8745\uff09"},"content":{"rendered":"<p><a href=\"https:\/\/www.oschina.net\/\" target=\"_blank\" rel=\"noopener noreferrer\">\u6587\u7ae0\u8f6c\u8f7d\u5f00\u6e90\u4e2d\u56fd<\/a><\/p>\n<p>\u53d1\u5e03\u65f6\u95f4\uff1a2016-12-12<\/p>\n<p>\u91cd\u8981\u7a0b\u5ea6\uff1a\u91cd\u8981<\/p>\n<p><strong>\u53d7\u5f71\u54cd\u7684\u7248\u672c\uff1a<\/strong><\/p>\n<ul class=\" list-paddingleft-2\">\n<li>\n<p>Apache Tomcat 9.0.0.m1\u52309.0.0.m13<\/p>\n<\/li>\n<li>\n<p>Apache Tomcat 8.5.0\u52308.5.8&nbsp;<\/p>\n<\/li>\n<li>\n<p>\u66f4\u65e9\u671f\u7248\u672c\u4e0d\u53d7\u5f71\u54cd<\/p>\n<\/li>\n<\/ul>\n<p><strong>\u63cf\u8ff0\uff1a<\/strong><\/p>\n<p>8.5.x \u7684 Connector \u4ee3\u7801\u91cd\u6784\u5f15\u5165\u4e86\u4e00\u4e2a\u5728 NIO HTTP \u8fde\u63a5\u5668\u53d1\u9001\u6587\u4ef6\u7684\u9519\u8bef\u5904\u7406\u4ee3\u7801\u4e2d\u7684\u56de\u5f52\uff0c\u56e0\u6b64\u5904\u7406\u53d1\u9001\u6587\u4ef6\u9519\u8bef\u5bfc\u81f4\u5f53\u524d\u5904\u7406\u5668\u5bf9\u8c61\u88ab\u591a\u6b21\u6dfb\u52a0\u5230\u5904\u7406\u5668\u9ad8\u901f\u7f13\u5b58\uff0c\u8fd9\u610f\u5473\u7740\u5904\u7406\u5668\u53ef\u4ee5\u7528\u4e8e\u5e76\u53d1\u8bf7\u6c42\uff0c\u5171\u4eab\u5904\u7406\u5668\u53ef\u5bfc\u81f4\u8bf7\u6c42\u4e4b\u95f4\u7684\u4fe1\u606f\u6cc4\u6f0f\uff0c\u5305\u62ec\u4f46\u4e0d\u9650\u4e8e\u4f1a\u8bddID\u548c\u54cd\u5e94\u4f53\u3002<\/p>\n<p><strong>\u89e3\u51b3\u65b9\u6848\uff1a<\/strong><\/p>\n<p>\u5b89\u88c5\u4e86\u53d7\u5f71\u54cd\u7248\u672c\u7684 NIO HTTP \u8fde\u63a5\u5668\u7684\u7528\u6237\u53ef\u4ee5\u91c7\u53d6\u4ee5\u4e0b\u65b9\u6cd5\u89e3\u51b3\uff1a<\/p>\n<ul class=\" list-paddingleft-2\">\n<li>\n<p>\u5207\u6362\u5230 NIO2 HTTP \u6216 APR HTTP \u8fde\u63a5\u5668<\/p>\n<\/li>\n<li>\n<p>\u7981\u6b62\u53d1\u9001\u6587\u4ef6<\/p>\n<\/li>\n<li>\n<p>\u5347\u7ea7\u5230 Apache Tomcat 9.0.0.M15 \u6216\u66f4\u9ad8\u7248\u672c \uff08Apache Tomcat 9.0.0.M14\u6709\u4fee\u590d\uff0c\u4f46\u6ca1\u6709\u53d1\u5e03\uff09<\/p>\n<\/li>\n<li>\n<p>\u5347\u7ea7\u5230 Apache Tomcat 8.5.9\u6216\u66f4\u9ad8\u7248\u672c<\/p>\n<\/li>\n<\/ul>\n<p>\u66f4\u591a\u8be6\u7ec6\u5185\u5bb9\u8bf7\u70b9\u51fb<a href=\"http:\/\/mail-archives.apache.org\/mod_mbox\/www-announce\/201612.mbox\/%3C76fe5f99-cc2c-4e48-b669-738f5dae7266@apache.org%3E\" target=\"_blank\" rel=\"noopener noreferrer\">\u8fd9\u91cc<\/a>\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u6587\u7ae0\u8f6c\u8f7d\u5f00\u6e90\u4e2d\u56fd \u53d1\u5e03\u65f6\u95f4\uff1a2016-12-12 \u91cd\u8981\u7a0b\u5ea6\uff1a\u91cd\u8981 \u53d7\u5f71\u54cd\u7684\u7248\u672c\uff1a Apache Tomcat 9.0.0.m1\u52309.0.0.m13 Apache Tomcat 8.5.0\u52308.5.8&nbsp; \u66f4\u65e9\u671f\u7248\u672c\u4e0d\u53d7\u5f71\u54cd \u63cf\u8ff0\uff1a 8.5.x \u7684 Connector \u4ee3\u7801\u91cd\u6784\u5f15\u5165\u4e86\u4e00\u4e2a\u5728 NIO HTTP \u8fde\u63a5\u5668\u53d1\u9001\u6587\u4ef6\u7684\u9519\u8bef\u5904\u7406\u4ee3\u7801\u4e2d\u7684\u56de\u5f52\uff0c\u56e0\u6b64\u5904\u7406\u53d1\u9001\u6587\u4ef6\u9519\u8bef\u5bfc\u81f4\u5f53\u524d\u5904\u7406\u5668\u5bf9\u8c61\u88ab\u591a\u6b21\u6dfb\u52a0\u5230\u5904\u7406\u5668\u9ad8\u901f\u7f13\u5b58\uff0c\u8fd9\u610f\u5473\u7740\u5904\u7406\u5668\u53ef\u4ee5\u7528\u4e8e\u5e76\u53d1\u8bf7\u6c42\uff0c\u5171\u4eab\u5904\u7406\u5668\u53ef\u5bfc\u81f4\u8bf7\u6c42\u4e4b\u95f4\u7684\u4fe1\u606f\u6cc4\u6f0f\uff0c\u5305\u62ec\u4f46\u4e0d\u9650\u4e8e\u4f1a\u8bddID\u548c\u54cd\u5e94\u4f53\u3002<\/p>\n","protected":false},"author":1,"featured_media":6522,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_bbp_topic_count":0,"_bbp_reply_count":0,"_bbp_total_topic_count":0,"_bbp_total_reply_count":0,"_bbp_voice_count":0,"_bbp_anonymous_reply_count":0,"_bbp_topic_count_hidden":0,"_bbp_reply_count_hidden":0,"_bbp_forum_subforum_count":0,"footnotes":""},"categories":[27],"tags":[292,26,64],"collection":[],"_links":{"self":[{"href":"https:\/\/aqzt.com\/wp-json\/wp\/v2\/posts\/6982"}],"collection":[{"href":"https:\/\/aqzt.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/aqzt.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/aqzt.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/aqzt.com\/wp-json\/wp\/v2\/comments?post=6982"}],"version-history":[{"count":0,"href":"https:\/\/aqzt.com\/wp-json\/wp\/v2\/posts\/6982\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/aqzt.com\/wp-json\/wp\/v2\/media\/6522"}],"wp:attachment":[{"href":"https:\/\/aqzt.com\/wp-json\/wp\/v2\/media?parent=6982"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/aqzt.com\/wp-json\/wp\/v2\/categories?post=6982"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/aqzt.com\/wp-json\/wp\/v2\/tags?post=6982"},{"taxonomy":"collection","embeddable":true,"href":"https:\/\/aqzt.com\/wp-json\/wp\/v2\/collection?post=6982"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}