Lucene search
+L

2 matches found

OSV
OSV
added 2023/10/13 10:56 p.m.12 views

MGASA-2023-0288 Updated the curl packages to fix two security vulnerabilities

curl/libcurl is vulnerable to a heap buffer overflow in its SOCKS5 support that could be exploited by a remote web server when curl is configured to use a SOCKS5 proxy with remote hostname resolution. libcurl is vulnerable to a cookie injection attack where a local attacker can inject cookies int...

9.8CVSS7.7AI score0.78483EPSS
SaveExploits6References8
Mageia
Mageia
added 2023/10/13 10:56 p.m.45 views

Updated the curl packages to fix two security vulnerabilities

curl/libcurl is vulnerable to a heap buffer overflow in its SOCKS5 support that could be exploited by a remote web server when curl is configured to use a SOCKS5 proxy with remote hostname resolution. libcurl is vulnerable to a cookie injection attack where a local attacker can inject cookies int...

9.8CVSS7.6AI score0.78483EPSS
SaveExploits6References7
Rows per page
Query Builder