Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7jvw-75gf-2h34

Опубликовано: 14 окт. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

During an upload, curl mishandles HTTP/2 RST_STREAM received from the server (with reason HTTP_1_1_REQUIRED or REFUSED_STREAM) leading to a use after free of a struct Curl_easy object.

During an upload, curl mishandles HTTP/2 RST_STREAM received from the server (with reason HTTP_1_1_REQUIRED or REFUSED_STREAM) leading to a use after free of a struct Curl_easy object.

EPSS

Процентиль: 70%
0.01284
Низкий

8.1 High

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 8.1
ubuntu
27 дней назад

During an upload, curl mishandles HTTP/2 `RST_STREAM` received from the server (with reason `HTTP_1_1_REQUIRED` or `REFUSED_STREAM`) leading to a use after free of a `struct Curl_easy` object.

CVSS3: 8.1
redhat
27 дней назад

During an upload, curl mishandles HTTP/2 `RST_STREAM` received from the server (with reason `HTTP_1_1_REQUIRED` or `REFUSED_STREAM`) leading to a use after free of a `struct Curl_easy` object.

CVSS3: 8.1
nvd
27 дней назад

During an upload, curl mishandles HTTP/2 `RST_STREAM` received from the server (with reason `HTTP_1_1_REQUIRED` or `REFUSED_STREAM`) leading to a use after free of a `struct Curl_easy` object.

CVSS3: 8.1
msrc
24 дня назад

HTTP/2 upload Use-After-Free

CVSS3: 8.1
debian
27 дней назад

During an upload, curl mishandles HTTP/2 `RST_STREAM` received from th ...

EPSS

Процентиль: 70%
0.01284
Низкий

8.1 High

CVSS3

Дефекты

CWE-416