Lucene search
+L

54 matches found

OSV
OSV
added 2023/10/18 4:15 a.m.12 views

ALPINE-CVE-2023-38545

This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is asked to pass along the host name to the SOCKS5 proxy to allow that to resolve the address instead of it getting done by curl itself, the maximum length that host name can be is 255 bytes. If the host na...

9.8CVSS6.9AI score0.78483EPSS
SaveExploits6References1
OSV
OSV
added 2023/10/18 4:15 a.m.7 views

DEBIAN-CVE-2023-38545

This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is asked to pass along the host name to the SOCKS5 proxy to allow that to resolve the address instead of it getting done by curl itself, the maximum length that host name can be is 255 bytes. If the host na...

9.8CVSS7.1AI score0.78483EPSS
SaveExploits6References1
RedHat Linux
RedHat Linux
added 2023/10/17 9:04 a.m.12 views

curl: heap based buffer overflow in the SOCKS5 proxy handshake

A heap-based buffer overflow flaw was found in the SOCKS5 proxy handshake in the Curl package. If Curl is unable to resolve the address itself, it passes the hostname to the SOCKS5 proxy. However, the maximum length of the hostname that can be passed is 255 bytes. If the hostname is longer, then...

9.8CVSS7AI score0.78483EPSS
SaveExploits6References5
RedHat Linux
RedHat Linux
added 2023/10/13 9:51 p.m.12 views

curl: heap based buffer overflow in the SOCKS5 proxy handshake

A heap-based buffer overflow flaw was found in the SOCKS5 proxy handshake in the Curl package. If Curl is unable to resolve the address itself, it passes the hostname to the SOCKS5 proxy. However, the maximum length of the hostname that can be passed is 255 bytes. If the hostname is longer, then...

9.8CVSS7AI score0.78483EPSS
SaveExploits6References5
SUSE CVE
SUSE CVE
added 2023/10/12 2:35 p.m.8 views

SUSE CVE-2023-38545

This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is asked to pass along the host name to the SOCKS5 proxy to allow that to resolve the address instead of it getting done by curl itself, the maximum length that host name can be is 255 bytes. If the host na...

8.1CVSS6.3AI score0.78483EPSS
SaveExploits6References62
curl security advisories
curl security advisories
added 2023/10/11 8:00 a.m.17 views

SOCKS5 heap buffer overflow

This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is asked to pass along the hostname to the SOCKS5 proxy to allow that to resolve the address instead of it getting done by curl itself, the maximum length that hostname can be is 255 bytes. If the hostname ...

9.8CVSS7.4AI score0.78483EPSS
SaveExploits6References1Affected Software2
OSV
OSV
added 2023/10/11 6:00 a.m.6 views

UBUNTU-CVE-2023-38545

This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is asked to pass along the host name to the SOCKS5 proxy to allow that to resolve the address instead of it getting done by curl itself, the maximum length that host name can be is 255 bytes. If the host na...

9.8CVSS6.7AI score0.78483EPSS
SaveExploits6References5
CNNVD
CNNVD
added 2023/10/11 12:00 a.m.9 views

curl 缓冲区错误漏洞

cURL is a network data transfer project. Usually when we say cURL, we mean the cURL command line tool. cURL's underlying use is the libcurl library. A heap overflow vulnerability exists in cURL SOCKS5, which can be exploited by an attacker to construct a malicious hostname and cause code executio...

9.8CVSS7.8AI score0.78483EPSS
SaveExploits6References30
SUSE CVE
SUSE CVE
added 2023/02/15 5:47 a.m.8 views

SUSE CVE-2012-2214

proxy.c in libpurple in Pidgin before 2.10.4 does not properly handle canceled SOCKS5 connection attempts, which allows user-assisted remote authenticated users to cause a denial of service application crash via a sequence of XMPP file-transfer requests...

3.5CVSS6.6AI score0.02195EPSS
SaveExploits1References3
OSV
OSV
added 2018/09/28 10:29 a.m.8 views

DEBIAN-CVE-2018-17613

Telegram Desktop aka tdesktop 1.3.16 alpha, when "Use proxy" is enabled, sends credentials and application data in cleartext over the SOCKS5 protocol...

9.8CVSS7AI score0.01625EPSS
SaveExploits0References1
OSV
OSV
added 2018/09/28 10:29 a.m.22 views

UBUNTU-CVE-2018-17613

Telegram Desktop aka tdesktop 1.3.16 alpha, when "Use proxy" is enabled, sends credentials and application data in cleartext over the SOCKS5 protocol...

9.8CVSS7.4AI score0.01625EPSS
SaveExploits0References4
OSV
OSV
added 2012/07/03 7:55 p.m.6 views

DEBIAN-CVE-2012-2214

proxy.c in libpurple in Pidgin before 2.10.4 does not properly handle canceled SOCKS5 connection attempts, which allows user-assisted remote authenticated users to cause a denial of service application crash via a sequence of XMPP file-transfer requests...

3.5CVSS6.2AI score0.02195EPSS
SaveExploits1References1
RedHat Linux
RedHat Linux
added 2010/03/17 1:04 p.m.6 views

Mozilla data corruption with SOCKS5 reply

Mozilla Firefox before 3.0.12, and 3.5.x before 3.5.2, allows remote SOCKS5 proxy servers to cause a denial of service data stream corruption via a long domain name in a reply...

5CVSS7.4AI score0.01991EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2009/07/22 12:54 a.m.9 views

Mozilla data corruption with SOCKS5 reply

Mozilla Firefox before 3.0.12, and 3.5.x before 3.5.2, allows remote SOCKS5 proxy servers to cause a denial of service data stream corruption via a long domain name in a reply...

5CVSS7.4AI score0.01991EPSS
SaveExploits0References4
Rows per page
Query Builder