curl and libcurl CVE-2023-38545 and CVE-2023-38546 vulnerabilities

CVE-2023-38545: severity HIGH (affects both libcurl and the curl tool)
A heap-based buffer overflow flaw was found in the SOCKS5 proxy handshake in the Curl package. If Curl is unable to resolve the address itself, it passes the hostname to the SOCKS5 proxy. However, the maximum length of the hostname that can be passed is 255 bytes. If the hostname is longer, then Curl switches to the local name resolving and passes the resolved address only to the proxy. The …

address buffer buffer overflow curl cve cve-2023-38545 cve-2023-38546 flaw found handshake high length libcurl libcurl cve overflow package proxy severity socks5 socks5 proxy tool vulnerabilities