Ò»¡¢Îó²î¸ÅÊö
Îó²îÃû³Æ | H2O-3 JDBC ·´ÐòÁл¯Îó²î |
CVE ID | CVE-2025-6507 |
Îó²îÀàÐÍ | ·´ÐòÁл¯Îó²î | ·¢Ã÷ʱ¼ä | 2025-09-03 |
Îó²îÆÀ·Ö | 9.8 | Îó²îÆ·¼¶ | ÑÏÖØ |
¹¥»÷ÏòÁ¿ | ÍøÂç | ËùÐèȨÏÞ | ÎÞ |
ʹÓÃÄÑ¶È | µÍ | Óû§½»»¥ | ²»ÐèÒª |
PoC/EXP | ÒѹûÕæ | ÔÚҰʹÓà | δ·¢Ã÷ |
H2O-3ÊÇÓÉH2O.ai¿ª·¢µÄ¿ªÔ´ÂþÑÜʽ»úеѧϰƽ̨£¬£¬£¬£¬£¬£¬Ö§³Ö´ó¹æÄ£Êý¾Ý´¦Öóͷ£Ó뽨ģ¡£¡£ ¡£¡£ËüÌṩÁËÆÕ±éµÄËã·¨£¬£¬£¬£¬£¬£¬°üÀ¨·ÖÀ࣬£¬£¬£¬£¬£¬»Ø¹é£¬£¬£¬£¬£¬£¬¾ÛÀ࣬£¬£¬£¬£¬£¬Òì³£¼ì²âºÍÉî¶Èѧϰ£¬£¬£¬£¬£¬£¬Äܹ»ÔÚ´óÊý¾ÝÇéÐÎϸßЧÔËÐС£¡£ ¡£¡£H2O-3Ö§³Ö¶àÖÖ±à³Ì½Ó¿Ú£¬£¬£¬£¬£¬£¬Èçpython£¬£¬£¬£¬£¬£¬R£¬£¬£¬£¬£¬£¬ScalaºÍJAVA£¬£¬£¬£¬£¬£¬Í¬Ê±ÓëSpark£¬£¬£¬£¬£¬£¬HadoopµÈÉú̬ϵͳ¼æÈÝ£¬£¬£¬£¬£¬£¬Àû±ã¼¯³Éµ½ÆóÒµµÄÊý¾ÝÆÊÎöÁ÷³ÌÖУ¬£¬£¬£¬£¬£¬ÆäÉè¼ÆÄ¿µÄÊÇΪÊý¾Ý¿Æѧ¼ÒºÍ¿ª·¢ÕßÌṩ¸ßÐÔÄÜ£¬£¬£¬£¬£¬£¬Ò×À©Õ¹ÇÒÒ×ÓÚ°²ÅŵĻúеѧϰ½â¾ö¼Æ»®¡£¡£ ¡£¡£
2025Äê9ÔÂ3ÈÕ£¬£¬£¬£¬£¬£¬°ÙÀÖ²©¼¯ÍÅVSRC¼à²âµ½H2O-3±£´æJDBC ·´ÐòÁл¯Îó²î£¬£¬£¬£¬£¬£¬¸ÃÎó²îÔ´ÓÚ²»ÊÜÐÅÈÎÊý¾ÝµÄ·´ÐòÁл¯£¬£¬£¬£¬£¬£¬¿ÉÄܵ¼ÖÂÔ¶³Ì´úÂëÖ´ÐкÍϵͳÎļþµÄ¶ÁÈ¡¡£¡£ ¡£¡£¹¥»÷Õß¿ÉÒÔͨ¹ýÈƹýÓÃÓÚ±ÜÃâ¶ñÒâ²ÎÊý×¢ÈëµÄÕýÔò±í´ïʽ¹ýÂËÆ÷À´Ê¹ÓøÃÎó²î£¬£¬£¬£¬£¬£¬ÓÈÆäÊÇÔÚJDBCÅþÁ¬ÖС£¡£ ¡£¡£¹¥»÷ÕßÄܹ»²Ù¿Ø²ÎÊýÖÐÐĵĿոñ£¬£¬£¬£¬£¬£¬´Ó¶øÈƹý¼ì²â»úÖÆ£¬£¬£¬£¬£¬£¬Ö´ÐÐδ¾ÊÚȨµÄÏÂÁî»ò»á¼ûÊÜÏÞµÄÎļþ£¬£¬£¬£¬£¬£¬ÕâʹµÃ¹¥»÷Õß¿ÉÒÔ»ñµÃ¶ÔÄ¿µÄϵͳµÄ¿ØÖÆȨÏÞ£¬£¬£¬£¬£¬£¬½øÒ»²½Î£º¦ÏµÍ³µÄÇå¾²¡£¡£ ¡£¡£
¶þ¡¢Ó°Ïì¹æÄ£
Èý¡¢Çå¾²²½·¥
3.1 Éý¼¶°æ±¾
ÒÑÐû²¼ÐÞ¸´°æ±¾£¬£¬£¬£¬£¬£¬ÇëÉý¼¶µ½H2O-3 >= 3.46.0.8¡£¡£ ¡£¡£
ÏÂÔØÁ´½Ó£ºhttps://github.com/h2oai/h2o-3/commit/f714edd6b8429c7a7211b779b6ec108a95b7382d
3.2 ÔÝʱ²½·¥
ÔÝÎÞ¡£¡£ ¡£¡£
3.3 ͨÓý¨Òé
? °´ÆÚ¸üÐÂϵͳ²¹¶¡£¬£¬£¬£¬£¬£¬ïÔÌϵͳÎó²î£¬£¬£¬£¬£¬£¬ÌáÉýЧÀÍÆ÷µÄÇå¾²ÐÔ¡£¡£ ¡£¡£? ÔöǿϵͳºÍÍøÂçµÄ»á¼û¿ØÖÆ£¬£¬£¬£¬£¬£¬Ð޸ķÀ»ðǽսÂÔ£¬£¬£¬£¬£¬£¬¹Ø±Õ·ÇÐëÒªµÄÓ¦Óö˿ڻòЧÀÍ£¬£¬£¬£¬£¬£¬ïÔ̽«Î£ÏÕЧÀÍ£¨ÈçSSH¡¢RDPµÈ£©Ì»Â¶µ½¹«Íø£¬£¬£¬£¬£¬£¬ïÔ̹¥»÷Ãæ¡£¡£ ¡£¡£? ʹÓÃÆóÒµ¼¶Çå¾²²úÆ·£¬£¬£¬£¬£¬£¬ÌáÉýÆóÒµµÄÍøÂçÇå¾²ÐÔÄÜ¡£¡£ ¡£¡£? ÔöǿϵͳÓû§ºÍȨÏÞÖÎÀí£¬£¬£¬£¬£¬£¬ÆôÓöàÒòËØÈÏÖ¤»úÖƺÍ×îСȨÏÞÔÔò£¬£¬£¬£¬£¬£¬Óû§ºÍÈí¼þȨÏÞÓ¦¼á³ÖÔÚ×îµÍÏ޶ȡ£¡£ ¡£¡£? ÆôÓÃÇ¿ÃÜÂëÕ½ÂÔ²¢ÉèÖÃΪ°´ÆÚÐ޸ġ£¡£ ¡£¡£
3.4 ²Î¿¼Á´½Ó
https://nvd.nist.gov/vuln/detail/CVE-2025-6507https://github.com/h2oai/h2o-3/commit/f714edd6b8429c7a7211b779b6ec108a95b7382d
¾©¹«Íø°²±¸11010802024551ºÅ