Vulnerabilityhigh

Be prepared to patch high-severity vulnerability in curl and libcurl

Help Net Securityby @zeljkazorzFeb 15, 2024 · 12:02 UTC (Feb 15, 2024)4 min read5 · 1 read

Read at helpnetsecurity.com

Analyze CVE-2023-38545 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-38545 CVE-2023-38546

Tags: cve-2023-38545 cve-2023-38546 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-38545 +1 related CVE CVE-2023-38546	This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake	9.8 group max	78%		Oct 18, 2023

From the original article

4 min read at helpnetsecurity.com

Curl v8. 4. 0 is out and fixes both CVE-2023-38545, a SOCKS5 heap buffer overflow vulnerability and CVE-2023-38546, a cookie injection flaw.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.