Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The smb_request_state function in cURL and libcurl 7.40.0 through 7.42.1 allows remote SMB servers to obtain sensitive information from memory or cause a denial of service (out-of-bounds read and crash) via crafted length and offset values.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Haxx cURL和libcurl 输入验证漏洞
Vulnerability Description
Haxx curl和libcurl都是瑞典Haxx公司的产品。curl是一套利用URL语法在命令行下工作的文件传输工具。libcurl是一个免费、开源的客户端URL传输库。 Haxx cURL和libcurl 7.40.0版本至7.42.1版本的‘smb_request_state’函数存在安全漏洞。远程攻击者可借助特制的长度值和偏移值利用该漏洞获取内存中的敏感信息，或造成拒绝服务（越边界读取和崩溃）。
CVSS Information
N/A
Vulnerability Type
N/A