Forum Discussion
CVE-2023-38545: Heap-based Buffer Overflow in curl On...
CVE-2023-38545: Heap-based Buffer Overflow in curl On October 3, Daniel Stenberg, a maintainer of curl, announced that a new high severity vulnerability would be fixed in curl 8.4.0, and that the fi...
The VPR Scoring for Plugin 182875 for the Curl 7.69 < 8.4.0 Heap Buffer Overflow was just raised to a Critical 9.2 severity. The CVE Base Score is still high at a 8.4.
The official stance from curl.se still seems to be to upgrade with extreme caution because an upgrade is likely to break other services or software in your OS.
Has anyone heard if Microsoft has any plans to release a patch?
