０７６萌ＳＮＳ
  • Login

  • Public

    • Public
    • Network
    • Groups
    • Popular
    • People

Conversation

Notices

  1. daniel:// stenberg:// (bagder@mastodon.social)'s status on Friday, 15-Sep-2023 03:02:00 JST daniel:// stenberg:// daniel:// stenberg://

    If you want to read the behind-the-scenes report and discussions about the most recent (legitimate) #curl #CVE, it has now been disclosed.

    This is how we work on security reports.

    https://hackerone.com/reports/2072338

    In conversation about a year ago from mastodon.social permalink

    Attachments

    1. curl disclosed on HackerOne: CVE-2023-38039: HTTP header allocation...
      It was found that curl does not currently limit the amount of HTTP headers to be received leading to a potential DOS for the users. If an attacker sets up a malicious HTTP server that continuously sends new headers and keeps the socket open, curl will continuously listen on the socket and parse new received headers. This leads to the user's machine allocating more and more resources until the...
    • Freax likes this.

Feeds

  • Activity Streams
  • RSS 2.0
  • Atom
  • Help
  • About
  • FAQ
  • TOS
  • Privacy
  • Source
  • Version
  • Contact

０７６萌ＳＮＳ is a social network, courtesy of ０７６. It runs on GNU social, version 2.0.2-beta0, available under the GNU Affero General Public License.

Creative Commons Attribution 3.0 All ０７６萌ＳＮＳ content and data are available under the Creative Commons Attribution 3.0 license.