Denial Of Service (DoS)

libcurl is vulnerable to Denial Of Service DoS. The vulnerability exists due to missing rate-limits which allows an attacker to consume resources via mismatched type of a headers API which results in an application crash...

CVE-2023-38039

CVE-2023-38039 affects curl; the vulnerability arises from unbounded header handling in HTTP responses, allowing an attacker to stream an endless header sequence and exhaust curl’s heap memory. The issue is caused by not enforcing a limit on the number/size of headers; impact is heap memory exhau...