CVE-2025-4947

Mô tả

Tham khảo

• curl.se/docs/CVE-2025-4947.html · Patch
• curl.se/docs/CVE-2025-4947.json · Vendor Advisory
• hackerone.com/reports/3150884 · Exploit
• openwall.com/lists/oss-security/2025/05/28/4 · Mailing List

Lỗ hổng khác của curl

• CVE-2026-82209CAO 8.2When libpsl support is enabled, libcurl fails to enforce the Public Suffix List boundary check when processing a `Set-Cookie` header where t…
• CVE-2026-82208CAO 7.5With the wolfSSL backend, when CA caching is enabled and an `CURLOPT_SSL_CTX_FUNCTION` callback replaces the trust store, libcurl can silent…
• CVE-2026-80255CAO 7.5A `Set-Cookie:` header using tab (horizontal tab, ASCII code 9) instead of space (ascii code 32) immediately before the `Secure` attribute c…
• CVE-2026-80231CAO 7.5A flaw in libcurl makes it wrongly reuse an existing HTTPS connection setup for a given hostname even when using a different Native CA Store…
• CVE-2026-80230CAO 7.5When `CURLOPT_PINNEDPUBLICKEY` is configured alongside options that disable standard peer verification (`CURLOPT_SSL_VERIFYPEER = 0` and `CU…