Non notée
CVE-2023-27537 A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate "handles"
Description
A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate "handles". This sharing was introduced without considerations for do this sharing across separate threads but there was no indication of this fact in the documentation. Due to missing mutexes or thread locks, two threads sharing the same HSTS data could end up doing a double-free or use-after-free.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| https://github.com/curl/curl | Versions non publiées | |
| SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
Références
- hackerone.com hackerone.com
- security.netapp.com security.netapp.com
- GLSA-202310-12 security.gentoo.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de https://github.com/curl/curl
Les 51 CVE de https://github.com/curl/curl →
CVE-2023-28322
An information disclosure vulnerability exists in…
5.3
Moyenne
CVE-2023-28319
A use after free vulnerability exists in…
7.5
Élevée
CVE-2023-28320
A denial of service vulnerability exists in…
5.9
Moyenne
CVE-2023-28321
An improper certificate validation vulnerability exists in…
5.9
Moyenne