CVE-2014-3143

CVE-2014-3143 is not just a placeholder; connected documents describe multiple curl/libcurl vulnerabilities. The issues involve memory safety in path handling and hostname parsing: (1) sanitize_cookie_path() may index memory with -1 when a path is a single double-quote, destroying heap memory; (2...