CVE-2023-38545 2

Vulnerability (CVE)

Curl 8.4.0 Vulnerability Detection & Mitigation | Qualys

The curl project pre-announced version 8.4.0, released October 11, 2023, to fix two vulnerabilities: CVE-2023-38545, a high-severity flaw affecting both libcurl and the curl tool that maintainers called arguably the most critical security flaw in curl in...

Vulnerabilities & Patching

CVE-2023-38545: So you cURL, but will you cIRL? | Grey Noise Blog

Cyber Risks GreyNoise Blog

On October 11th, 2023, a heap-based buffer overflow in curl was disclosed as CVE-2023-38545, affecting libcurl 7.69.0 through 8.3.0. Reaching the vulnerable code path requires the application to use a SOCKS5 proxy mode and attempt to resolve a hostname of...

Identity & Access Management