Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2023/03/08 6:10 p.m.255 views

curl: CVE-2023-27537: HSTS double-free

A double-free vulnerability CVE-2023-27537 existed in libcurl's HSTS HTTP Strict Transport Security implementation due to a lack of exclusion control when processing HSTS with multi-threading. This could lead to a use-after-free UAF issue when other threads access entries. An attacker could explo...

5.9CVSS7.3AI score0.01856EPSS
SaveExploits1
Rows per page
Query Builder