← 返回地图破甲

Security check up

拒绝服务 / Allocation of Resources Without Limits or Throttling / #3269761

厂商
curl
严重程度
低危
赏金
—
弱点
Allocation of Resources Without Limits or Throttling
研究员
@ejejohn
披露日期
2025-07-24
资产
https://github.com/curl/curl
CVE
—

该报告还没有中文解读。

原文摘录

摘自原文(549 字符中的一小部分)
[Statement clarifying if an AI was used to find the issue or generate the report]

默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 curl 所有。

时间线

阅读 HackerOne 原文 ↗作者 @ejejohn · 版权归作者与 curl 所有

同类报告

CVE-2024-41990: Potential denial-of-service in django.utils.html.urlize()Internet Bug Bounty · 2024-11-30 · $2,162High resource consumption by insufficient sanitization of forum threads paginationFlickr · 2025-11-24 · $479Memory Leak in libcurl via Location Header Handling (CWE-770)curl · 2025-05-22HTTP/3 paused transfer buffers incoming data without bound up to ~1 GiBcurl · 2026-05-19Unbounded memory growth with session handling in TLSv1.3Internet Bug Bounty · 2024-09-22 · $497CVE-2024-56374 Potential denial-of-service in IPv6 validationInternet Bug Bounty · 2025-02-06