Buckle up. One of the pending #curl CVEs that we publish next week is graded severity HIGH. Considered the worst flaw found in curl in several years.
Yes, found with AI.
@bagder@mastodon.social This is gonna get bad.
@drq@mastodon.ml I vividly recall the panic when we did our last HIGH one....
@bagder@mastodon.social Time to go looking for my hard hat.
@bagder@mastodon.social nejjjj 😰
@bagder@mastodon.social
Let's assess how the IOT vendors embedding curl in appliances will address that...
@bagder@mastodon.social always amazed at how many more significant findings there are given the extreme level of scrutiny yous have already been through
@bagder@mastodon.social but curl is a client, not a server. How can it be attacked?
@bonkers@nerdculture.de welcome to the concept of "mr malicious server"
@bagder@mastodon.social
What are the odds that you could run into it?
@bagder@mastodon.social AISLE again?