The curl project has addressed a memory corruption flaw in its handling of HTTP/2 uploads. A malicious server could exploit the issue during an upload to corrupt client memory, which researchers successfully escalated to remote code execution. Administrators should upgrade to curl 8.23.0 or later to patch this vulnerability.
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →