CVE-2023-38545: High Severity cURL Vulnerability Detection

On October 11 a new version of curl (8.4.0) was released, where a couple of new vulnerabilities were fixed (CVE-2023-38545 with severity HIGH and CVE-2023-38546 with severity LOW). These issues were previously announced in the project’s discussion. At the time of this blog, there have been several proof of concepts released for CVE-2023-38545 which result in crashes, but not exploitation.

• 
  CVE-2023-38545 is a SOCKS5 heap buffer overflow. This flaw makes curl overflow a heap-based buffer in the …

blog concepts curl curl vulnerability cve cve-2023-38545 cve-2023-38546 detection high low october project proof severity version vulnerabilities vulnerability vulnerability detection