curl Addresses HTTP/2 Upload Vulnerability Leading to Client-Side Code Execution

A vulnerability in curl's handling of HTTP/2 uploads allowed malicious servers to corrupt client memory and enable code execution. The curl project addressed the issue in version 8.23.0 on October 14, though exploitation requires specific client configuration knowledge.

A flaw in how curl handles HTTP/2 uploads lets a malicious server receiving an upload corrupt the client's memory, and the researcher who reported it turned that into code execution on the uploading machine.

The curl project fixed it on October 14 in curl 8.23.0. Taking over a client needs exact knowledge of its build and memory layout, and curl expects a real attack to end in a crash

Read original article