Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for CURLOPT_SSL_CIPHER_LIST when libcurl is built to use the Schannel TLS library. The selected cipher set was stored in a single "static" variable in the library, which has the surprising side-effect that if an application sets up multiple concurrent transfers, the last one that sets the ciphers will accidentally control the set used by all transfers. In a worst-case scenario, this weakens transport security significantly.
CVSS Information
N/A
Vulnerability Type
业务逻辑错误
Vulnerability Title
Haxx libcurl 加密问题漏洞
Vulnerability Description
HAXX Haxx libcurl是瑞典HAXX公司的一个免费、开源的客户端URL传输库。该库支持FTP、FTPS、TFTP、HTTP等。 Haxx libcurl存在加密问题漏洞，该漏洞源于libcurl允许应用程序使用名为CURLOPT SSL CIPHER LIST的选项指定在传输中使用的特定TLS密码。
CVSS Information
N/A
Vulnerability Type
N/A