Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Поиск уязвимостей

Количество 14

Количество 14

fstec логотип

BDU:2023-05819

больше 3 лет назад

Уязвимость интерфейса утилиты командной строки cURL, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 8.8
EPSS: Средний
redos логотип

ROS-20250804-21

больше 1 года назад

Уязвимость curl

CVSS3: 8.8
EPSS: Средний
redos логотип

ROS-20250804-01

больше 1 года назад

Уязвимость libcurl

CVSS3: 8.8
EPSS: Средний
altlinux логотип

ALT-PU-2023-5709

около 3 лет назад

ALT-PU-2023-5709: package `curl` update to version 8.3.0-alt1

CVSS3: 8.8
EPSS: Средний
altlinux логотип

ALT-PU-2023-5711

около 3 лет назад

ALT-PU-2023-5711: package `curl` update to version 8.3.0-alt1

CVSS3: 8.8
EPSS: Низкий
ubuntu логотип

CVE-2023-38039

около 3 лет назад

When curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed later via the libcurl headers API. However, curl did not have a limit in how many or how large headers it would accept in a response, allowing a malicious server to stream an endless series of headers and eventually cause curl to run out of heap memory.

CVSS3: 7.5
EPSS: Средний
redhat логотип

CVE-2023-38039

около 3 лет назад

When curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed later via the libcurl headers API. However, curl did not have a limit in how many or how large headers it would accept in a response, allowing a malicious server to stream an endless series of headers and eventually cause curl to run out of heap memory.

CVSS3: 7.5
EPSS: Средний
nvd логотип

CVE-2023-38039

около 3 лет назад

When curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed later via the libcurl headers API. However, curl did not have a limit in how many or how large headers it would accept in a response, allowing a malicious server to stream an endless series of headers and eventually cause curl to run out of heap memory.

CVSS3: 7.5
EPSS: Средний
msrc логотип

CVE-2023-38039

около 3 лет назад

Hackerone: CVE-2023-38039 HTTP headers eat all memory

EPSS: Средний
debian логотип

CVE-2023-38039

около 3 лет назад

When curl retrieves an HTTP response, it stores the incoming headers s ...

CVSS3: 7.5
EPSS: Средний
suse-cvrf логотип

SUSE-SU-2023:3823-1

около 3 лет назад

Security update for curl

EPSS: Средний
suse-cvrf логотип

SUSE-SU-2023:3692-1

около 3 лет назад

Security update for curl

EPSS: Средний
github логотип

GHSA-99j9-jf36-9747

около 3 лет назад

When curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed later via the libcurl headers API. However, curl did not have a limit in how many or how large headers it would accept in a response, allowing a malicious server to stream an endless series of headers and eventually cause curl to run out of heap memory.

CVSS3: 7.5
EPSS: Средний
msrc логотип

CVE-2023-38039 mariner - do not use this one

около 3 лет назад

Hackerone: CVE-2023-38039 HTTP headers eat all memory

CVSS3: 7.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
fstec логотип
BDU:2023-05819

Уязвимость интерфейса утилиты командной строки cURL, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 8.8
56%
Средний
больше 3 лет назад
redos логотип
ROS-20250804-21

Уязвимость curl

CVSS3: 8.8
56%
Средний
больше 1 года назад
redos логотип
ROS-20250804-01

Уязвимость libcurl

CVSS3: 8.8
56%
Средний
больше 1 года назад
altlinux логотип
ALT-PU-2023-5709

ALT-PU-2023-5709: package `curl` update to version 8.3.0-alt1

CVSS3: 8.8
56%
Средний
около 3 лет назад
altlinux логотип
ALT-PU-2023-5711

ALT-PU-2023-5711: package `curl` update to version 8.3.0-alt1

CVSS3: 8.8
около 3 лет назад
ubuntu логотип
CVE-2023-38039

When curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed later via the libcurl headers API. However, curl did not have a limit in how many or how large headers it would accept in a response, allowing a malicious server to stream an endless series of headers and eventually cause curl to run out of heap memory.

CVSS3: 7.5
56%
Средний
около 3 лет назад
redhat логотип
CVE-2023-38039

When curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed later via the libcurl headers API. However, curl did not have a limit in how many or how large headers it would accept in a response, allowing a malicious server to stream an endless series of headers and eventually cause curl to run out of heap memory.

CVSS3: 7.5
56%
Средний
около 3 лет назад
nvd логотип
CVE-2023-38039

When curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed later via the libcurl headers API. However, curl did not have a limit in how many or how large headers it would accept in a response, allowing a malicious server to stream an endless series of headers and eventually cause curl to run out of heap memory.

CVSS3: 7.5
56%
Средний
около 3 лет назад
msrc логотип
CVE-2023-38039

Hackerone: CVE-2023-38039 HTTP headers eat all memory

56%
Средний
около 3 лет назад
debian логотип
CVE-2023-38039

When curl retrieves an HTTP response, it stores the incoming headers s ...

CVSS3: 7.5
56%
Средний
около 3 лет назад
suse-cvrf логотип
SUSE-SU-2023:3823-1

Security update for curl

56%
Средний
около 3 лет назад
suse-cvrf логотип
SUSE-SU-2023:3692-1

Security update for curl

56%
Средний
около 3 лет назад
github логотип
GHSA-99j9-jf36-9747

When curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed later via the libcurl headers API. However, curl did not have a limit in how many or how large headers it would accept in a response, allowing a malicious server to stream an endless series of headers and eventually cause curl to run out of heap memory.

CVSS3: 7.5
56%
Средний
около 3 лет назад
msrc логотип
CVE-2023-38039 mariner - do not use this one

Hackerone: CVE-2023-38039 HTTP headers eat all memory

CVSS3: 7.5
около 3 лет назад

Уязвимостей на страницу