Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple off-by-one errors in the cURL library (libcurl) 7.11.2 through 7.15.0 allow local users to trigger a buffer overflow and cause a denial of service or bypass PHP security restrictions via certain URLs that (1) are malformed in a way that prevents a terminating null byte from being added to either a hostname or path buffer, or (2) contain a "?" separator in the hostname portion, which causes a "/" to be prepended to the resulting string.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
cURL/libcURL URL解析器缓冲区溢出漏洞
Vulnerability Description
cURL是命令行传输文件工具，支持FTP、FTPS、HTTP、HTTPS、GOPHER、TELNET、DICT、FILE和LDAP。 libcurl在解析URL时存在溢出漏洞，攻击者可以利用这个漏洞绕过PHP的safe_mode/open_basedir限制，或从apache内存窃取本地SSL证书。libcurl在解析URL时首先会为主机名和路径部分分配特定的缓冲区。如果URL较短的话，会为每个缓冲区至少分配256个字节；如果输入URL超过了256字节限制的话，libcurl就会分配2个缓冲区，大小为输入
CVSS Information
N/A
Vulnerability Type
N/A