Lucene search

K
hackeroneSybrH1:1606039
HistoryJun 18, 2022 - 5:59 p.m.

Internet Bug Bounty: CVE-2022-27781: CERTINFO never-ending busy-loop

2022-06-1817:59:48
sybr
hackerone.com
50

Published Advisory: https://curl.se/docs/CVE-2022-27781.html

Original Report: https://hackerone.com/reports/1555441

Impact

Due to an erroneous function, a malicious server could make libcurl built with NSS get stuck in a never-ending busy-loop when trying to retrieve that information.