tocsin

Alpine/curl: medium 4.3

A malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to curl and curl < 7.84.0 stores all of them. A sufficiently large amount of (big) cookies make subsequent HT

Action: Upgrade curl to 7.84.0-r0 or later.

Affected

introducedfixedlast affected
7.71.07.84.0-r0-

Fixed versions

7.84.0-r0

Sources

published · modified · JSON