Re:How I Made a Heap Overflow in Curl
by Cloudef on Wednesday October 11, 2023 @06:46AM
(#37842896)
Quite a bit of hype and drama for something that requires very specific condition to be exploited.
[ Parent
| on HN ]
... and that is installed on billions on devices. I can imagine you quickly get very specific conditions here and there when something is deployed at that scale.
Re:How I Made a Heap Overflow in Curl
by faster_harder on Wednesday October 11, 2023 @08:02AM
(#37843400)
Curl has had their share of issues with CVEs, I assume they want to show that they are taking actual security issues very seriously. See e.g. https://daniel.haxx.se/blog/2023/08/26/cve-2020-19909-is-eve...