Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xgr5-38f7-xqvv

Опубликовано: 03 июн. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

libcurl provides the CURLOPT_CERTINFO option to allow applications torequest details to be returned about a server's certificate chain.Due to an erroneous function, a malicious server could make libcurl built withNSS get stuck in a never-ending busy-loop when trying to retrieve thatinformation.

libcurl provides the CURLOPT_CERTINFO option to allow applications torequest details to be returned about a server's certificate chain.Due to an erroneous function, a malicious server could make libcurl built withNSS get stuck in a never-ending busy-loop when trying to retrieve thatinformation.

EPSS

Процентиль: 20%
0.00063
Низкий

7.5 High

CVSS3

Дефекты

CWE-400
CWE-835

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 3 лет назад

libcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be returned about a server's certificate chain.Due to an erroneous function, a malicious server could make libcurl built withNSS get stuck in a never-ending busy-loop when trying to retrieve thatinformation.

CVSS3: 7.5
redhat
около 3 лет назад

libcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be returned about a server's certificate chain.Due to an erroneous function, a malicious server could make libcurl built withNSS get stuck in a never-ending busy-loop when trying to retrieve thatinformation.

CVSS3: 7.5
nvd
около 3 лет назад

libcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be returned about a server's certificate chain.Due to an erroneous function, a malicious server could make libcurl built withNSS get stuck in a never-ending busy-loop when trying to retrieve thatinformation.

CVSS3: 7.5
msrc
около 3 лет назад

Описание отсутствует

CVSS3: 7.5
debian
около 3 лет назад

libcurl provides the `CURLOPT_CERTINFO` option to allow applications t ...

EPSS

Процентиль: 20%
0.00063
Низкий

7.5 High

CVSS3

Дефекты

CWE-400
CWE-835