Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-8925

Опубликовано: 03 июл. 2026
Источник: nvd
CVSS3: 9.8
EPSS Низкий

Описание

The curl logic that works with SASL authentication could end up cleaning up the GSASL context twice without clearing the pointer in between, making it free() the same pointer twice.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*
Версия от 8.15.0 (включая) до 8.21.0 (исключая)

EPSS

Процентиль: 61%
0.0108
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-415

Связанные уязвимости

CVSS3: 9.8
ubuntu
28 дней назад

The curl logic that works with SASL authentication could end up cleaning up the GSASL context *twice* without clearing the pointer in between, making it `free()` the same pointer twice.

CVSS3: 8.1
redhat
28 дней назад

The curl logic that works with SASL authentication could end up cleaning up the GSASL context *twice* without clearing the pointer in between, making it `free()` the same pointer twice.

msrc
25 дней назад

SASL double-free

CVSS3: 9.8
debian
28 дней назад

The curl logic that works with SASL authentication could end up cleani ...

CVSS3: 9.8
github
28 дней назад

The curl logic that works with SASL authentication could end up cleaning up the GSASL context *twice* without clearing the pointer in between, making it `free()` the same pointer twice.

EPSS

Процентиль: 61%
0.0108
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-415