关键漏洞信息 CVE编号: CVE-2025-49176 漏洞类型: Integer Overflow in Big Requests Extension 报告日期: 2025-04-23 07:50 UTC 修改日期: 2025-07-02 18:28 UTC 优先级: high 严重性: high 影响产品: - Red Hat Enterprise Linux 8 - Red Hat Enterprise Linux 9 - Red Hat Enterprise Linux 8.2 Advanced Update Support - Red Hat Enterprise Linux 9.4 Extended Update Support 修复状态: - 已在以下安全公告中解决: - RHSA-2025:9384 (Red Hat Enterprise Linux 8) - RHSA-2025:9383 (Red Hat Enterprise Linux 9) - RHSA-2025:9385 (Red Hat Enterprise Linux 8) - RHSA-2025:9392 (Red Hat Enterprise Linux 9) - RHSA-2025:9464 (Red Hat Enterprise Linux 8.2 Advanced Update Support) - RHSA-2025:10236 (Red Hat Enterprise Linux 9.4 Extended Update Support) 漏洞描述: - 在Big Requests扩展中存在整数溢出漏洞。请求长度在验证之前被乘以某个值，导致溢出并绕过大小检查，可能引发内存损坏。