CVE-2026-92387: CVE-2026-92387: güvenlik açığı

Açıklama (NVD)

By permanently omitting the final control-response line, a malicious FTP, IMAP, POP3, or SMTP server can exploit libcurl and completely bypass its configured transfer timeout mechanism, indefinitely blocking all concurrent transfers bound to the same multi-handle.

Özet bilgiler

CVSS v3.1

8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

%1,05 (yüzdelik 64)

CWE

CWE-835

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• curl.se
• curl.se
• hackerone.com
• hackerone.com
• CWE-835