Lucene search
+L

2 matches found

CNVD
CNVD
added 2016/12/28 12:0 a.m.2 views

Haxx curl and libcurl security bypass vulnerability

Haxx curl and libcurl are both products of the Swedish company Haxx. curl is a set of file transfer tools that utilize URL syntax to work at the command line. libcurl is a free, open source client-side URL transfer library. A remote security bypass vulnerability exists in Haxx libcurl version...

8.1CVSS9.6AI score0.02674EPSS
SaveExploits0References1
OSV
OSV
added 2016/12/23 8:0 a.m.12 views

CURL-CVE-2016-9594 uninitialized random

libcurl's new internal function that returns a good 32-bit random value was implemented poorly and overwrote the pointer instead of writing the value into the buffer the pointer pointed to. This random value is used to generate nonces for Digest and NTLM authentication, for generating boundary...

8.1CVSS7.3AI score0.02674EPSS
SaveExploits0
Rows per page
Query Builder