Vulnerabilityhigh
Security Patch for Two New Flaws in Curl Library Arriving on October 11
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2023-38545+1 related CVE | This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake | 9.8 group max | 78% |
From the original article
1 min read at thehackernews.com
Ravie Lakshmanan Oct 09, 2023 Software Security / Vulnerability The maintainers of the Curl library have released an advisory warning of two security vulnerabilities that are expected to be addressed as part of an forthcoming update set for release on October 11, 2023. This includes a high-severity and a low-severity flaw tracked under the identifiers CVE-2023-38545 and CVE-2023-38546, respectively.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.