Lucene search
K

6 matches found

Amazon
Amazon
added 2023/06/07 12:0 a.m.35 views

Medium: curl

Issue Overview: The curl advisory describes this issue as follows: curl supports communicating using the TELNET protocol and as a part of this it offers users to pass on user name and "telnet options" for the server negotiation. Due to lack of proper input scrubbing and without it being the...

9.8CVSS6.9AI score0.00179EPSS
Exploits6
Redos
Redos
added 2023/04/07 12:0 a.m.88 views

ROS-20230407-01

The libcurl library vulnerability is related to FTP connection reuse, previously created connections are stored in a connection pool for reuse if they match the current connection pool. connections are stored in the connection pool for reuse if they match the current configuration. configuration...

7.7CVSS7.5AI score0.00071EPSS
Exploits4
NVD
NVD
added 2023/03/30 8:15 p.m.17 views

CVE-2023-27537

A double free vulnerability exists in libcurl 8.0.0 when sharing HSTS data between separate "handles". This sharing was introduced without considerations for do this sharing across separate threads but there was no indication of this fact in the documentation. Due to missing mutexes or thread...

5.9CVSS7.3AI score0.00071EPSS
Exploits1References3
OSV
OSV
added 2023/03/30 8:15 p.m.19 views

CVE-2023-27537

A double free vulnerability exists in libcurl 8.0.0 when sharing HSTS data between separate "handles". This sharing was introduced without considerations for do this sharing across separate threads but there was no indication of this fact in the documentation. Due to missing mutexes or thread...

5.9CVSS6.7AI score0.00071EPSS
Exploits1References3
AlpineLinux
AlpineLinux
added 2023/03/30 12:0 a.m.32 views

CVE-2023-27537

A double free vulnerability exists in libcurl 8.0.0 when sharing HSTS data between separate "handles". This sharing was introduced without considerations for do this sharing across separate threads but there was no indication of this fact in the documentation. Due to missing mutexes or thread...

5.9CVSS6.4AI score0.00071EPSS
Exploits1
UbuntuCve
UbuntuCve
added 2023/03/20 12:0 a.m.28 views

CVE-2023-27537

A double free vulnerability exists in libcurl 8.0.0 when sharing HSTS data between separate "handles". This sharing was introduced without considerations for do this sharing across separate threads but there was no indication of this fact in the documentation. Due to missing mutexes or thread...

5.9CVSS6.8AI score0.00071EPSS
Exploits1References2
Rows per page
Query Builder