Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xcm8-9xjx-f5jq

Опубликовано: 06 сент. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 9.1

Описание

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process.

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process.

EPSS

Процентиль: 58%
0.00897
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 9.1
ubuntu
15 дней назад

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process.

CVSS3: 3.7
redhat
15 дней назад

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process.

CVSS3: 9.1
nvd
15 дней назад

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process.

msrc
12 дней назад

HTTP/2 server push UAF

CVSS3: 9.1
debian
15 дней назад

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the p ...

EPSS

Процентиль: 58%
0.00897
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-416