4 ms·

I'm not a security expert but how common is it for memory corruption vulnerabilities to actually be exploited in the wild? And isn't curl just a short running

by oars 4y ago

I'm not a security expert but how common is it for memory corruption vulnerabilities to actually be exploited in the wild? And isn't curl just a short running tool run by a user in their own cli environment? I understand why having long running processes with vulnerabilities are an issue, but if there was a memory corruption vulnerability in curl how could an attacker exploit it (remotely)?

LinuxBender 4y ago
Just like a browser curl is parsing, processing and making decisions based on untrusted input. There have been exploits against web clients using malformed headers, status codes, using buffer overflows, broken parsing of character sets and more. Curl just happens to have a really good developer that has avoided most of these pitfalls. To find some examples of the exploits one could pull down all the metasploit modules, glance through the OWASP database or look through the change logs for all the major browsers.