VDB
JLSEC-2025-34
JLSEC-2025-34
PUBLISHED
This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Julia | CURL_jll | 0, 0 |
| Julia | LibCURL_jll | 7.70.0+0, 7.70.0+0 |
Timeline
- Oct 10, 2025 CVE Published
- Nov 6, 2025 CVE Updated
References
- http://seclists.org/fulldisclosure/2024/Jan/34 url
- http://seclists.org/fulldisclosure/2024/Jan/37 url
- http://seclists.org/fulldisclosure/2024/Jan/38 url
- https://curl.se/docs/CVE-2023-38545.html url
- https://forum.vmssoftware.com/viewtopic.php?f=8&t=8868 url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OGMXNRNSJ4ETDK6FRNU3J7SABXPWCHSQ/ url
- https://security.netapp.com/advisory/ntap-20231027-0009/ url
- https://security.netapp.com/advisory/ntap-20240201-0005/ url
- https://support.apple.com/kb/HT214036 url
- https://support.apple.com/kb/HT214057 url
- https://support.apple.com/kb/HT214058 url
- https://support.apple.com/kb/HT214063 url
- https://www.secpod.com/blog/high-severity-heap-buffer-overflow-vulnerability/ url
- https://github.com/UTsweetyfish/CVE-2023-38545 url
- https://github.com/bcdannyboy/CVE-2023-38545 url
- https://github.com/dbrugman/CVE-2023-38545-POC url