CVE-2016-8623CWE-416
A flaw was found in curl before version 7.51.0
Low · published August 1, 2018
What it is
A flaw was found in curl before version 7.51.0. The way curl handles cookies permits other threads to trigger a use-after-free leading to information disclosure.
The record
Technical detail
- CVSS v3.0
- 3.3 · LOW
- Vector
- CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.02548 · 84.8th percentile
- Weakness
- CWE-416 · Use After Free
- Published
- 2018-08-01T06:00Z
EPSS history
Timeline