CVE-2024-6874

概要

参考情報

• openwall.com/lists/oss-security/2024/07/24/2 · Mailing List
• curl.se/docs/CVE-2024-6874.html · Vendor Advisory
• curl.se/docs/CVE-2024-6874.json · Vendor Advisory
• hackerone.com/reports/2604391 · Exploit
• security.netapp.com/advisory/ntap-20240822-0004

libcurl のその他の脆弱性

• CVE-2025-0725高 7.3When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option, *…
• CVE-2024-7264中 6.5libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incor…
• CVE-2024-6197高 7.5libcurl's ASN1 parser has this utf8asn1str() function used for parsing an ASN.1 UTF-8 string. Itcan detect an invalid field and return error…
• CVE-2023-38546低 3.7This flaw allows an attacker to insert cookies at will into a running program using libcurl, if the specific series of conditions are met. …
• CVE-2023-38545緊急 9.8This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is asked to pass along the host name to the SOCK…