{"id":"CVE-2023-38039","aliases":["ALPINE-CVE-2023-38039","AZL-28833","AZL-29698","AZL-38341","BELL-CVE-2023-38039","CURL-CVE-2023-38039","DEBIAN-CVE-2023-38039","EUVD-2023-41865","GHSA-99j9-jf36-9747","JLSEC-2026-1342","MGASA-2023-0263","RHSA-2023:7625","SUSE-SU-2023:3692-1","SUSE-SU-2023:3823-1","UBUNTU-CVE-2023-38039","openSUSE-SU-2024:13230-1"],"status":"published","title":"When curl retrieves an HTTP response, it stores the incoming headers so that\nthey can be accessed...","description":"When curl retrieves an HTTP response, it stores the incoming headers so that\nthey can be accessed later via the libcurl headers API.\n\nHowever, curl did not have a limit in how many or how large headers it would\naccept in a response, allowing a malicious server to stream an endless series\nof headers and eventually cause curl to run out of heap memory.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.56211,"percentile":0.99063,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-770"],"published":"2023-09-13T00:00:00Z","modified":"2026-10-28T02:30:57Z","exploits":[{"source":"pocgithub","id":"Smartkeyss/CVE-2023-38039","title":"Smartkeyss/CVE-2023-38039","date":"2024-05-20","url":"https://github.com/Smartkeyss/CVE-2023-38039"}],"fixes":[{"ecosystem":"Alpine:v3.15","package":"curl","fixed_in":["8.3.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"curl","fixed_in":["8.3.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"curl","fixed_in":["8.3.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"curl","fixed_in":["8.3.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"curl","fixed_in":["8.3.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"curl","fixed_in":["8.3.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"curl","fixed_in":["8.3.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"curl","fixed_in":["8.3.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"curl","fixed_in":["8.3.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"curl","fixed_in":["8.3.0-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"mysql","fixed_in":["8.0.35-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"curl","fixed_in":["8.3.0-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"tensorflow","fixed_in":["2.16.1-1"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"curl","fixed_in":["8.4.0-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"curl","fixed_in":["8.4.0-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"curl","fixed_in":["8.4.0-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"curl","fixed_in":["7.88.1-10+deb12u3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"curl","fixed_in":["8.3.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"curl","fixed_in":["8.3.0-1"],"sources":["osv"]},{"ecosystem":"Julia","package":"LibCURL_jll","fixed_in":["8.4.0+0"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"curl","fixed_in":["8.0.1-11.71.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"curl","fixed_in":["8.0.1-11.71.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"curl","fixed_in":["8.0.1-11.71.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"curl","fixed_in":["8.0.1-150400.5.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"curl","fixed_in":["8.0.1-150400.5.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"curl","fixed_in":["8.0.1-150400.5.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"curl","fixed_in":["8.0.1-150400.5.29.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"curl","fixed_in":["8.0.1-150400.5.29.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"curl","fixed_in":["8.0.1-150400.5.29.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"curl","fixed_in":["8.2.1-1ubuntu3"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"curl","fixed_in":["8.3.0-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.15","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.84.0"},{"fixed":"8.3.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.84.0"},{"fixed":"8.3.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.84.0"},{"fixed":"8.3.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.84.0"},{"fixed":"8.3.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.84.0"},{"fixed":"8.3.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.84.0"},{"fixed":"8.3.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.84.0"},{"fixed":"8.3.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.84.0"},{"fixed":"8.3.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.84.0"},{"fixed":"8.3.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.84.0"},{"fixed":"8.3.0-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.35-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.3.0-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"tensorflow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.1-1"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.1.0-r2"},{"fixed":"8.4.0-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.1.2-r0"},{"fixed":"8.4.0-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.1.2-r0"},{"fixed":"8.4.0-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.88.1-10+deb12u3"}]}],"versions":["7.88.1-10","7.88.1-10+deb12u1","7.88.1-10+deb12u1~bpo11+1","7.88.1-10+deb12u2","7.88.1-10+deb12u3~bpo11+1"]},{"source":"osv","ecosystem":"Debian:13","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.3.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.3.0-1"}]}]},{"source":"osv","ecosystem":"Julia","package":"LibCURL_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"7.84.0+0"},{"fixed":"8.4.0+0"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.74.0-1.13.mga8"}]}],"bundled":11},{"source":"osv","ecosystem":"Mageia:9","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.88.1-3.1.mga9"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-16.el7jbcs"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-16.el7jbcs"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-16.el7jbcs"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-16.el7jbcs"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-16.el7jbcs"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-16.el7jbcs"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-16.el8jbcs"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-openssl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-16.el8jbcs"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-openssl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-16.el8jbcs"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-openssl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-16.el8jbcs"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-openssl-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-16.el8jbcs"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-openssl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-16.el8jbcs"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-openssl-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.1k-16.el8jbcs"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.0-2.el7jbcs"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-curl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.0-2.el7jbcs"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.0-2.el7jbcs"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.0-2.el7jbcs"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.0-2.el8jbcs"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-curl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.0-2.el8jbcs"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.0-2.el8jbcs"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-libcurl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.0-2.el8jbcs"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.4.0-2.el8jbcs"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_jk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.49-1.redhat_1.el7jbcs"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_jk-ap24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.49-1.redhat_1.el7jbcs"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_jk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.49-1.redhat_1.el7jbcs"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_jk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.49-1.redhat_1.el8jbcs"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_jk-ap24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.49-1.redhat_1.el8jbcs"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_jk-ap24-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.49-1.redhat_1.el8jbcs"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.19-32.el7jbcs"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el7","package":"jbcs-httpd24-mod_http2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.19-32.el7jbcs"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_http2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.19-32.el8jbcs"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:jboss_core_services:1::el8","package":"jbcs-httpd24-mod_http2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.19-32.el8jbcs"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1-11.71.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1-11.71.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1-11.71.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1-150400.5.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1-150400.5.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1-150400.5.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1-150400.5.29.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1-150400.5.29.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.1-150400.5.29.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.1-1ubuntu3"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.3.0-1.1"}]}]}],"products":[{"vendor":"curl","product":"curl"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"haxx","product":"curl"},{"vendor":"microsoft","product":"windows_10_1809"},{"vendor":"microsoft","product":"windows_10_21h2"},{"vendor":"microsoft","product":"windows_10_22h2"},{"vendor":"microsoft","product":"windows_11_21h2"},{"vendor":"microsoft","product":"windows_11_22h2"},{"vendor":"microsoft","product":"windows_11_23h2"},{"vendor":"microsoft","product":"windows_server_2019"},{"vendor":"microsoft","product":"windows_server_2022"}],"references":[{"url":"https://hackerone.com/reports/2072338","tags":["x_transferred","Exploit","Issue Tracking","Patch","Third Party Advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TEAWTYHC3RT6ZRS5OZRHLAIENVN6CCIS/","tags":["x_transferred","Mailing List","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5DCZMYODALBLVOXVJEN2LF2MLANEYL4F/","tags":["x_transferred","Mailing List","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M6KGKB2JNZVT276JYSKI6FV2VFJUGDOJ/","tags":["x_transferred","Mailing List","web"]},{"url":"https://security.gentoo.org/glsa/202310-12","tags":["x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://security.netapp.com/advisory/ntap-20231013-0005/","tags":["x_transferred","Third Party Advisory","advisory","web"]},{"url":"http://seclists.org/fulldisclosure/2023/Oct/17","tags":["x_transferred","Mailing List","Third Party Advisory","web"]},{"url":"https://support.apple.com/kb/HT214036","tags":["x_transferred","Third Party Advisory","web"]},{"url":"https://www.insyde.com/security-pledge/SA-2023064","tags":["x_transferred","Third Party Advisory","web"]},{"url":"https://support.apple.com/kb/HT214063","tags":["x_transferred","Third Party Advisory","web"]},{"url":"https://support.apple.com/kb/HT214057","tags":["x_transferred","Third Party Advisory","web"]},{"url":"https://support.apple.com/kb/HT214058","tags":["x_transferred","Third Party Advisory","web"]},{"url":"http://seclists.org/fulldisclosure/2024/Jan/34","tags":["x_transferred","Mailing List","Third Party Advisory","web"]},{"url":"http://seclists.org/fulldisclosure/2024/Jan/37","tags":["x_transferred","Mailing List","Third Party Advisory","web"]},{"url":"http://seclists.org/fulldisclosure/2024/Jan/38","tags":["x_transferred","Mailing List","Third Party Advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-38039","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5DCZMYODALBLVOXVJEN2LF2MLANEYL4F","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M6KGKB2JNZVT276JYSKI6FV2VFJUGDOJ","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TEAWTYHC3RT6ZRS5OZRHLAIENVN6CCIS","tags":["web"]},{"url":"https://security.netapp.com/advisory/ntap-20231013-0005","tags":["web"]},{"url":"https://github.com/advisories/GHSA-99j9-jf36-9747","tags":["web"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2023-38039","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2023-38039","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/advisories/BELL-SA-2023-4","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/38xxx/CVE-2023-38039.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-38039","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2023-0263.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=31703","tags":["report"]},{"url":"https://curl.se/docs/CVE-2023-27533.html","tags":["advisory"]},{"url":"https://curl.se/docs/CVE-2023-27534.html","tags":["advisory"]},{"url":"https://curl.se/docs/CVE-2023-27535.html","tags":["advisory"]},{"url":"https://curl.se/docs/CVE-2023-27536.html","tags":["advisory"]},{"url":"https://curl.se/docs/CVE-2023-27537.html","tags":["advisory"]},{"url":"https://curl.se/docs/CVE-2023-27538.html","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5964-1","tags":["advisory"]},{"url":"https://curl.se/docs/CVE-2023-28319.html","tags":["advisory"]},{"url":"https://curl.se/docs/CVE-2023-28320.html","tags":["advisory"]},{"url":"https://curl.se/docs/CVE-2023-28321.html","tags":["advisory"]},{"url":"https://curl.se/docs/CVE-2023-28322.html","tags":["advisory"]},{"url":"https://lists.suse.com/pipermail/sle-security-updates/2023-May/014913.html","tags":["web"]},{"url":"https://curl.se/docs/CVE-2023-32001.html","tags":["advisory"]},{"url":"https://curl.se/docs/CVE-2023-38039.html","tags":["advisory","article","report"]},{"url":"https://ubuntu.com/security/notices/USN-6363-1","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:7625","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2181082","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2182561","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2182565","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2207947","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2224962","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2227852","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2238847","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2239135","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2241933","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2241938","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2243877","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7625.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-0464","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-0464","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-0464","tags":["advisory"]},{"url":"https://www.openssl.org/news/secadv/20230322.txt","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-0465","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-0465","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-0465","tags":["advisory"]},{"url":"https://www.openssl.org/news/secadv/20230328.txt","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-0466","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-0466","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-0466","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-2650","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-2650","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-2650","tags":["advisory"]},{"url":"https://www.openssl.org/news/secadv/20230530.txt","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-3446","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-3446","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3446","tags":["advisory"]},{"url":"https://www.openssl.org/news/secadv/20230719.txt","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-3817","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-3817","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3817","tags":["advisory"]},{"url":"https://www.openssl.org/news/secadv/20230731.txt","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-38039","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-38039","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-38545","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-38545","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-38545","tags":["advisory"]},{"url":"https://curl.se/docs/CVE-2023-38545.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-38546","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2101","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-38546","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-38546","tags":["advisory"]},{"url":"https://curl.se/docs/CVE-2023-38546.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-41081","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-41081","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-41081","tags":["advisory"]},{"url":"https://lists.apache.org/thread/rd1r26w7271jyqgzr4492tooyt583d8b","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-45802","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-45802","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-45802","tags":["advisory"]},{"url":"https://httpd.apache.org/security/vulnerabilities_24.html","tags":["article"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233692-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1215026","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-38039","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233823-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-38039","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-38039","description":"When curl retrieves an HTTP response, it stores the incoming headers so that\nthey can be accessed later via the libcurl headers API.\n\nHowever, curl did not have a limit in how many or how large headers it would\naccept in a response, allowing a malicious server to stream an endless series\nof headers and eventually cause curl to run out of heap memory.","status":"published","published":"2023-09-15T03:21:54.348Z","modified":"2025-12-02T20:06:21.809Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:35:29.772612Z"}],"euvd":[{"id":"EUVD-2023-41865","description":"When curl retrieves an HTTP response, it stores the incoming headers so that\nthey can be accessed later via the libcurl headers API.\n\nHowever, curl did not have a limit in how many or how large headers it would\naccept in a response, allowing a malicious server to stream an endless series\nof headers and eventually cause curl to run out of heap memory.","status":"published","published":"2023-09-15T03:21:54Z","modified":"2025-12-02T20:06:21Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T19:49:10.716009Z"}],"ghsa":[{"id":"GHSA-99j9-jf36-9747","title":"When curl retrieves an HTTP response, it stores the incoming headers so that\nthey can be accessed...","description":"When curl retrieves an HTTP response, it stores the incoming headers so that\nthey can be accessed later via the libcurl headers API.\n\nHowever, curl did not have a limit in how many or how large headers it would\naccept in a response, allowing a malicious server to stream an endless series\nof headers and eventually cause curl to run out of heap memory.","status":"published","published":"2023-09-15T06:30:18Z","modified":"2024-04-01T18:30:56Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:55:45.740984Z"}],"nvd":[{"id":"CVE-2023-38039","description":"When curl retrieves an HTTP response, it stores the incoming headers so that\nthey can be accessed later via the libcurl headers API.\n\nHowever, curl did not have a limit in how many or how large headers it would\naccept in a response, allowing a malicious server to stream an endless series\nof headers and eventually cause curl to run out of heap memory.","status":"published","published":"2023-09-15T04:15:10.127Z","modified":"2026-06-17T06:09:17.45Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:08:29.595868Z"}],"osv":[{"id":"ALPINE-CVE-2023-38039","description":"When curl retrieves an HTTP response, it stores the incoming headers so that\nthey can be accessed later via the libcurl headers API.\n\nHowever, curl did not have a limit in how many or how large headers it would\naccept in a response, allowing a malicious server to stream an endless series\nof headers and eventually cause curl to run out of heap memory.","status":"published","published":"2023-09-15T04:15:10.127Z","modified":"2026-10-26T17:17:58.631164404Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:49.709457Z"},{"id":"AZL-28833","title":"CVE-2023-38039 affecting package mysql for versions less than 8.0.35-1","description":"When curl retrieves an HTTP response, it stores the incoming headers so that\nthey can be accessed later via the libcurl headers API.\n\nHowever, curl did not have a limit in how many or how large headers it would\naccept in a response, allowing a malicious server to stream an endless series\nof headers and eventually cause curl to run out of heap memory.","status":"published","published":"2023-09-15T04:15:10Z","modified":"2026-04-21T04:26:00.70178Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:03.46006Z"},{"id":"AZL-29698","title":"CVE-2023-38039 affecting package curl for versions less than 8.3.0-1","description":"When curl retrieves an HTTP response, it stores the incoming headers so that\nthey can be accessed later via the libcurl headers API.\n\nHowever, curl did not have a limit in how many or how large headers it would\naccept in a response, allowing a malicious server to stream an endless series\nof headers and eventually cause curl to run out of heap memory.","status":"published","published":"2023-09-15T04:15:10Z","modified":"2026-04-21T04:26:01.085427Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:03.46006Z"},{"id":"AZL-38341","title":"CVE-2023-38039 affecting package tensorflow for versions less than 2.16.1-1","description":"When curl retrieves an HTTP response, it stores the incoming headers so that\nthey can be accessed later via the libcurl headers API.\n\nHowever, curl did not have a limit in how many or how large headers it would\naccept in a response, allowing a malicious server to stream an endless series\nof headers and eventually cause curl to run out of heap memory.","status":"published","published":"2023-09-15T04:15:10Z","modified":"2026-04-21T04:50:22.842507Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:04.608733Z"},{"id":"BELL-CVE-2023-38039","status":"published","published":"2023-09-15T04:15:00Z","modified":"2026-01-26T09:33:28.524246Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:17.742221Z"},{"id":"CVE-2023-38039","description":"When curl retrieves an HTTP response, it stores the incoming headers so that\nthey can be accessed later via the libcurl headers API.\n\nHowever, curl did not have a limit in how many or how large headers it would\naccept in a response, allowing a malicious server to stream an endless series\nof headers and eventually cause curl to run out of heap memory.","status":"published","published":"2023-09-15T03:21:54.348Z","modified":"2026-10-28T02:30:57.177354342Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:32.922049Z"},{"id":"DEBIAN-CVE-2023-38039","description":"When curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed later via the libcurl headers API.  However, curl did not have a limit in how many or how large headers it would accept in a response, allowing a malicious server to stream an endless series of headers and eventually cause curl to run out of heap memory.","status":"published","published":"2023-09-15T04:15:10.127Z","modified":"2026-10-26T18:02:41.322030738Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:39.980321Z"},{"id":"JLSEC-2026-1342","title":"When curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed...","description":"When curl retrieves an HTTP response, it stores the incoming headers so that\nthey can be accessed later via the libcurl headers API.\n\nHowever, curl did not have a limit in how many or how large headers it would\naccept in a response, allowing a malicious server to stream an endless series\nof headers and eventually cause curl to run out of heap memory.","status":"published","published":"2026-08-17T13:15:13.4Z","modified":"2026-08-17T13:44:05.759306517Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:47:18.159338Z"},{"id":"RHSA-2023:7625","title":"Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP2 security update","status":"published","published":"2024-09-13T21:19:05Z","modified":"2026-10-15T10:06:18Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"UBUNTU-CVE-2023-38039","description":"When curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed later via the libcurl headers API. However, curl did not have a limit in how many or how large headers it would accept in a response, allowing a malicious server to stream an endless series of headers and eventually cause curl to run out of heap memory.","status":"published","published":"2023-09-13T00:00:00Z","modified":"2026-04-22T14:10:07.401387Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:21.882004Z"},{"id":"CURL-CVE-2023-38039","title":"HTTP headers eat all memory","description":"When curl retrieves an HTTP response, it stores the incoming headers so that\nthey can be accessed later via the libcurl headers API.\n\nHowever, curl did not have a limit on the size or quantity of headers it would\naccept in a response, allowing a malicious server to stream an endless series\nof headers to a client and eventually cause curl to run out of heap memory.","status":"published","published":"2023-09-13T08:00:00Z","modified":"2026-10-25T01:05:01.888845898Z","updated_at":"2026-11-02T15:43:55.998148Z"},{"id":"MGASA-2023-0263","title":"Updated curl packages fix security vulnerability","description":"TELNET option IAC injection. (CVE-2023-27533)\n\nSFTP path ~ resolving discrepancy. (CVE-2023-27534)\n\nFTP too eager connection reuse. (CVE-2023-27535)\n\nGSS delegation too eager connection re-use. (CVE-2023-27536)\n\nHSTS double free. (CVE-2023-27537)\n\nSSH connection too eager reuse still. (CVE-2023-27538)\n\nUAF in SSH sha256 fingerprint check. (CVE-2023-28319)\n\nsiglongjmp race condition. (CVE-2023-28320)\n\nIDN wildcard match. (CVE-2023-28321)\n\nmore POST-after-PUT confusion. (CVE-2023-28322)\n\nHTTP headers eat all memory. (CVE-2023-38039)\n","status":"published","published":"2023-09-24T22:16:18Z","modified":"2026-04-16T04:43:47.858393758Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2024:13230-1","title":"curl-8.3.0-1.1 on GA media","description":"These are all security issues fixed in the curl-8.3.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:22:40.621462Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"SUSE-SU-2023:3692-1","title":"Security update for curl","description":"This update for curl fixes the following issues:\n\n- CVE-2023-38039: Fixed possible DoS when receiving too large HTTP header. (bsc#1215026)\n","status":"published","published":"2023-09-19T20:05:59Z","modified":"2026-02-04T02:40:52.74013Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3823-1","title":"Security update for curl","description":"This update for curl fixes the following issues:\n\n- CVE-2023-38039: Fixed possible DoS when receiving too large HTTP header. (bsc#1215026)\n","status":"published","published":"2023-09-27T16:42:52Z","modified":"2026-02-04T03:52:58.326646Z","updated_at":"2026-11-02T15:53:53.440387Z"}]}}