Логотип exploitDog
bind:CVE-2023-38039
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2023-38039

Количество 12

Количество 12

ubuntu логотип

CVE-2023-38039

около 2 лет назад

When curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed later via the libcurl headers API. However, curl did not have a limit in how many or how large headers it would accept in a response, allowing a malicious server to stream an endless series of headers and eventually cause curl to run out of heap memory.

CVSS3: 7.5
EPSS: Низкий
redhat логотип

CVE-2023-38039

около 2 лет назад

When curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed later via the libcurl headers API. However, curl did not have a limit in how many or how large headers it would accept in a response, allowing a malicious server to stream an endless series of headers and eventually cause curl to run out of heap memory.

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2023-38039

около 2 лет назад

When curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed later via the libcurl headers API. However, curl did not have a limit in how many or how large headers it would accept in a response, allowing a malicious server to stream an endless series of headers and eventually cause curl to run out of heap memory.

CVSS3: 7.5
EPSS: Низкий
msrc логотип

CVE-2023-38039

около 2 лет назад

Hackerone: CVE-2023-38039 HTTP headers eat all memory

EPSS: Низкий
debian логотип

CVE-2023-38039

около 2 лет назад

When curl retrieves an HTTP response, it stores the incoming headers s ...

CVSS3: 7.5
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2023:3823-1

около 2 лет назад

Security update for curl

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2023:3692-1

около 2 лет назад

Security update for curl

EPSS: Низкий
github логотип

GHSA-99j9-jf36-9747

около 2 лет назад

When curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed later via the libcurl headers API. However, curl did not have a limit in how many or how large headers it would accept in a response, allowing a malicious server to stream an endless series of headers and eventually cause curl to run out of heap memory.

CVSS3: 7.5
EPSS: Низкий
msrc логотип

CVE-2023-38039 mariner - do not use this one

около 2 лет назад

Hackerone: CVE-2023-38039 HTTP headers eat all memory

CVSS3: 7.5
EPSS: Низкий
fstec логотип

BDU:2023-05819

больше 2 лет назад

Уязвимость интерфейса утилиты командной строки cURL, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 8.8
EPSS: Низкий
redos логотип

ROS-20250804-21

3 месяца назад

Уязвимость curl

CVSS3: 8.8
EPSS: Низкий
redos логотип

ROS-20250804-01

3 месяца назад

Уязвимость libcurl

CVSS3: 8.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2023-38039

When curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed later via the libcurl headers API. However, curl did not have a limit in how many or how large headers it would accept in a response, allowing a malicious server to stream an endless series of headers and eventually cause curl to run out of heap memory.

CVSS3: 7.5
9%
Низкий
около 2 лет назад
redhat логотип
CVE-2023-38039

When curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed later via the libcurl headers API. However, curl did not have a limit in how many or how large headers it would accept in a response, allowing a malicious server to stream an endless series of headers and eventually cause curl to run out of heap memory.

CVSS3: 7.5
9%
Низкий
около 2 лет назад
nvd логотип
CVE-2023-38039

When curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed later via the libcurl headers API. However, curl did not have a limit in how many or how large headers it would accept in a response, allowing a malicious server to stream an endless series of headers and eventually cause curl to run out of heap memory.

CVSS3: 7.5
9%
Низкий
около 2 лет назад
msrc логотип
CVE-2023-38039

Hackerone: CVE-2023-38039 HTTP headers eat all memory

9%
Низкий
около 2 лет назад
debian логотип
CVE-2023-38039

When curl retrieves an HTTP response, it stores the incoming headers s ...

CVSS3: 7.5
9%
Низкий
около 2 лет назад
suse-cvrf логотип
SUSE-SU-2023:3823-1

Security update for curl

9%
Низкий
около 2 лет назад
suse-cvrf логотип
SUSE-SU-2023:3692-1

Security update for curl

9%
Низкий
около 2 лет назад
github логотип
GHSA-99j9-jf36-9747

When curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed later via the libcurl headers API. However, curl did not have a limit in how many or how large headers it would accept in a response, allowing a malicious server to stream an endless series of headers and eventually cause curl to run out of heap memory.

CVSS3: 7.5
9%
Низкий
около 2 лет назад
msrc логотип
CVE-2023-38039 mariner - do not use this one

Hackerone: CVE-2023-38039 HTTP headers eat all memory

CVSS3: 7.5
около 2 лет назад
fstec логотип
BDU:2023-05819

Уязвимость интерфейса утилиты командной строки cURL, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 8.8
9%
Низкий
больше 2 лет назад
redos логотип
ROS-20250804-21

Уязвимость curl

CVSS3: 8.8
9%
Низкий
3 месяца назад
redos логотип
ROS-20250804-01

Уязвимость libcurl

CVSS3: 8.8
9%
Низкий
3 месяца назад

Уязвимостей на страницу