PT-2023-4006 · Libcurl+4 · Libcurl+4
Publicado
2023-06-27
·
Atualizado
2024-06-15
·
CVE-2023-32001
CVSS v2.0
6.5
Média
| Vetor | AV:N/AC:L/Au:S/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
libcurl (affected versions not specified)
Description
The issue is related to a race condition problem in the
fopen() function of the libcurl library, which can be exploited by a remote attacker to create or overwrite protected files. This can happen when libcurl is saving cookie, HSTS, and/or alt-svc data to files. The exploitation of this flaw may allow an attacker to trick the victim into creating or overwriting protected files in unintended ways.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Time Of Check To Time Of Use
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Linuxmint
Suse
Ubuntu
Libcurl