Buy commercial curl support. We
help you work out your issues, debug your libcurl applications, use the API,
port to new platforms, add new features and more. With a team lead by the
curl founder Daniel himself.
Vulnerabilities affect version fixes about CVE-2022-43551
- Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ] [ by messages with attachments ]
From: 陈星杵 via curl-library <curl-library_at_lists.haxx.se>
Date: Fri, 13 Dec 2024 20:44:50 +0800 (GMT+08:00)
Hello,
I found that the affected version of CVE-2022-43551 on the "https://curl.se/docs/CVE-2022-43551.html" is missing. First of all, thank you very much for the very clear explanation on the website about the root causes of vulnerabilities and patc. But based on my review and analysis of the code repository, I have found that this vulnerability still exists in 'curl-7_74_0', 'curl-7_75_0', 'curl-7_76_0', 'curl-7_76_1'.However, the scope of the vulnerability affected provided on the website is "curl 7.77.0 to and including 7.86.0". So the correct affected versions is: "curl 7.74.0 to and including 7.86.0".
Reference：
https://curl.se/docs/CVE-2022-43551.html
https://github.com/curl/curl/blob/curl-7_73_0/lib/http.c
Date: Fri, 13 Dec 2024 20:44:50 +0800 (GMT+08:00)
Hello,
I found that the affected version of CVE-2022-43551 on the "https://curl.se/docs/CVE-2022-43551.html" is missing. First of all, thank you very much for the very clear explanation on the website about the root causes of vulnerabilities and patc. But based on my review and analysis of the code repository, I have found that this vulnerability still exists in 'curl-7_74_0', 'curl-7_75_0', 'curl-7_76_0', 'curl-7_76_1'.However, the scope of the vulnerability affected provided on the website is "curl 7.77.0 to and including 7.86.0". So the correct affected versions is: "curl 7.74.0 to and including 7.86.0".
Reference：
https://curl.se/docs/CVE-2022-43551.html
https://github.com/curl/curl/blob/curl-7_73_0/lib/http.c
-- Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library Etiquette: https://curl.se/mail/etiquette.htmlReceived on 2024-12-13