TLDR InfoSec · ATTACKS & VULNERABILITIES
HIGH SEVERITY CURL CVE
Summary from the TLDR InfoSec newsletter
The nearly ubiquitous curl project has revealed details about a security issue that the maintainers warned of last week. The vulnerability is a heap-based buffer overflow in the SOCKS5 handshake process that occurs when a long hostname is provided and the handshake is too slow. An updated version of curl, as well as patches for older versions, has been released.