Multiple integer overflows in the (1) curl_escape, (2) curl_easy_escape, (3) curl_unescape, and (4) curl_easy_unescape functions in libcurl before 7.50.3 allow attackers to have unspecified impact. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Integer Overflow
Buffer Overflow
Fedora
Libcurl
NVD
CVSS 3.0
9.8
EPSS
2.3%
Mirror Manager version 0.7.2 and older is vulnerable to remote code execution in the checkin code. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Code Injection vulnerability could allow attackers to inject and execute arbitrary code within the application.
RCE
Code Injection
Mirror Manager
NVD
GitHub
CVSS 3.0
9.8
EPSS
1.8%