{"uuid": "58c85b32-e7e4-495f-8754-c7ad4af3e22b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-38545", "type": "published-proof-of-concept", "source": "https://t.me/xhqcankao/6527", "content": "Curl \u6b63\u5f0f\u53d1\u5e03\u65b0\u7248\u672c 8.4.0 \uff0c\u4fee\u590d SOCKS5 \u5806\u6ea2\u51fa\u6f0f\u6d1e\uff0c\u8bf7\u5c3d\u5feb\u66f4\u65b0\u3002\n\nCurl \u9879\u76ee\u7684\u7ef4\u62a4\u8005\u5728\u4e00\u5468\u524d\u5c31\u53d1\u5e03\u4e86\u6f0f\u6d1e\u63d0\u9192\uff0c\u8868\u793a\u5c06\u5728 8.4.0 \u7248\u672c\u4e2d\u4fee\u590d\u8fd9\u4e2a\u4e25\u91cd\u7684\u6f0f\u6d1e\u3002\u636e\u7ef4\u62a4\u4eba\u5458\u79f0\uff0c\u8fd9\u53ef\u80fd\u662f\u4ed6\u4eec\u957f\u671f\u4ee5\u6765\u89c1\u8fc7\u7684\u6700\u4e25\u91cd\u7684 curl \u5b89\u5168\u95ee\u9898\uff0c\u540c\u65f6\u5f71\u54cd\u5230 libcurl \u5e93\u548c curl \u5de5\u5177\u3002\n\n\u6839\u636e Curl \u4f5c\u8005 Daniel Stenberg \u5728\u5176\u4e2a\u4eba\u535a\u5ba2\u4e2d\u7684\u4ecb\u7ecd\uff0c\u8fd9\u4e2a\u9ad8\u5371\u6f0f\u6d1e\u662f SOCKS5 \u5806\u6ea2\u51fa\u6f0f\u6d1e(heap buffer overflow)\uff0c\u8be5\u6f0f\u6d1e(CVE-2023-38545)\u4f1a\u5bfc\u81f4 curl \u5728 SOCKS5 \u4ee3\u7406\u63e1\u624b\u8fc7\u7a0b\u4e2d\u6ea2\u51fa\u57fa\u4e8e\u5806\u7684\u7f13\u51b2\u533a\u3002\n\n\u76ee\u524d 8.4.0 \u7248\u672c\u5df2\u6b63\u5f0f\u53d1\u5e03\uff0c\u5efa\u8bae\u7528\u6237\u548c\u5f00\u53d1\u8005\u7acb\u5373\u66f4\u65b0\u3002\n\n\u6f0f\u6d1e\u8be6\u60c5\uff1aDaniel Stenberg \u535a\u5ba2", "creation_timestamp": "2026-08-24T15:00:04.582572Z"}