Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-8925

Опубликовано: 03 июл. 2026
Источник: nvd
CVSS3: 9.8
EPSS Низкий

Описание

The curl logic that works with SASL authentication could end up cleaning up the GSASL context twice without clearing the pointer in between, making it free() the same pointer twice.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*
Версия от 8.15.0 (включая) до 8.21.0 (исключая)

EPSS

Процентиль: 50%
0.00674
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-415

Связанные уязвимости

CVSS3: 9.8
ubuntu
2 месяца назад

The curl logic that works with SASL authentication could end up cleaning up the GSASL context *twice* without clearing the pointer in between, making it `free()` the same pointer twice.

CVSS3: 8.1
redhat
2 месяца назад

The curl logic that works with SASL authentication could end up cleaning up the GSASL context *twice* without clearing the pointer in between, making it `free()` the same pointer twice.

msrc
2 месяца назад

SASL double-free

CVSS3: 9.8
debian
2 месяца назад

The curl logic that works with SASL authentication could end up cleani ...

CVSS3: 9.8
github
2 месяца назад

The curl logic that works with SASL authentication could end up cleaning up the GSASL context *twice* without clearing the pointer in between, making it `free()` the same pointer twice.

EPSS

Процентиль: 50%
0.00674
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-415