CVE-2023-52266

ehttp 1.0.6 before 17405b9 has an epollsocket.cpp readfunc use-after-free. An attacker can make many connections over a short time to trigger this...

CVE-2023-52266

creationtimestamp| type| source ---|---|--- 2023-12-31 01:26:17+00:00| seen| https://t.me/ctinow/160977 2023-12-31 07:39:37+00:00| seen| https://t.me/cibsecurity/74048 2024-01-07 09:13:32+00:00| seen| https://t.me/arpsyndicate/2633 2024-01-10 01:16:49+00:00| seen| https://t.me/ctinow/165484...

CVE-2023-52266

CVE-2023-52266 affects ehttp 1.0.6 prior to 17405b9. The root cause is a use-after-free in the epoll_socket.cpp read_func, enabling an attacker to trigger memory corruption by opening many connections in a short time. Documented references consistently describe the issue and indicate a fix is ava...