\u00cen utilitarul de preluare \u0219i trimitere a datelor prin re\u021bea curl \u0219i \u00een biblioteca libcurl, care se dezvolt\u0103 \u00een paralel, a fost identificat\u0103 o vulnerabilitate (CVE-2023-38545) care poate duce la un overflow de buffer \u0219i, poten\u021bial, la execu\u021bia codului atacatorului pe partea clientului atunci c\u00e2nd se acceseaz\u0103 un server HTTPS controlat de un atacator prin intermediul utilitarului curl sau al unei aplica\u021bii care utilizeaz\u0103 libcurl. Problema apare numai atunci c\u00e2nd \u00een curl este activat accesul prin proxy SOCKS5. \u00cen cazul accesului direct f\u0103r\u0103 proxy, vulnerabilitatea nu se manifest\u0103. Vulnerabilitatea a fost corectat\u0103 \u00een versiunea curl 8.4.0. Cercet\u0103torul de securitate care a identificat eroarea a primit o recompens\u0103 de 4660 USD \u00een cadrul ini\u021biativei Internet Bug Bounty pe Hackerone. <\/p>\n
Vulnerabilitatea este cauzat\u0103 de o eroare \u00een codul de rezolvare a numelui host \u00eenainte de a accesa proxy SOCKS5. La o lungime a numelui host de p\u00e2n\u0103 la 256 de caractere, curl trimite imediat numele c\u0103tre proxy SOCKS5 pentru rezolvare de partea acestuia, iar dac\u0103 numele este mai mare de 255 de caractere, trece la rezolvatorul local \u0219i trimite \u00een SOCKS5 deja adresa specificat\u0103. Din cauza unei erori \u00een cod, flagul care indic\u0103 necesitatea rezolv\u0103rii locale putea fi setat incorect \u00een procesul de negociere lent\u0103 a conexiunii prin SOCKS5, ceea ce ducea la scrierea numelui host lung \u00een bufferul alocat pentru a re\u021bine adrese IP<\/a> sau numele care nu dep\u0103\u0219e\u0219te 255 de caractere. <\/p>\n Proprietarul site-ului la care curl se conecteaz\u0103 prin intermediul proxy-ului SOCKS5 poate ini\u021bia o suprascriere a buffer-ului pe partea clientului, return\u00e2nd un cod de redirec\u021bionare a cererii (HTTP 30x) \u0219i specific\u00e2nd \u00een antetul «Location:» un URL cu un nume de gazd\u0103, ale c\u0103rui dimensiuni se afl\u0103 \u00een intervalul de 16 p\u00e2n\u0103 la 64 KB (valoarea de 16 KB este determinat\u0103 de dimensiunea minim\u0103 necesar\u0103 pentru supra\u00eenc\u0103rcarea buffer-ului dedicat, iar valoarea de 65 KB este legat\u0103 de lungimea maxim\u0103 permis\u0103 a numelui de gazd\u0103 \u00een URL). Dac\u0103 redirec\u021bionarea cererilor este permis\u0103 \u00een set\u0103rile libcurl \u0219i proxy-ul SOCKS5 utilizat este suficient de lent, atunci numele lung al gazdei va fi scris \u00eentr-un buffer mic, cu o dimensiune evident mai mic\u0103. <\/p>\n Vulnerabilitatea afecteaz\u0103 \u00een principal aplica\u021biile bazate pe libcurl \u0219i se manifest\u0103 \u00een utilitarul curl doar c\u00e2nd se utilizeaz\u0103 op\u021biunea «—limit-rate» cu o valoare mai mic\u0103 de 65541 — \u00een libcurl, \u00een mod implicit, se aloc\u0103 un buffer de 16 KB, iar \u00een utilitarul curl — 100 KB, dar aceast\u0103 dimensiune variaz\u0103 \u00een func\u021bie de valoarea parametrului «—limit-rate». <\/p>\n Daniel Stenberg, autorul proiectului, a men\u021bionat c\u0103 vulnerabilitatea a r\u0103mas nedetectat\u0103 timp de 1315 zile. De asemenea, a fost spus c\u0103 41% dintre vulnerabilit\u0103\u021bile anterior descoperite \u00een curl ar fi putut fi evitate, dac\u0103 curl ar fi fost scris \u00eentr-un limbaj care asigur\u0103 o gestionare sigur\u0103 a memoriei, \u00eens\u0103 nu se preconizeaz\u0103 o rescriere a curl \u00eentr-un alt limbaj \u00een viitorul apropiat. Ca m\u0103suri pentru \u00eembun\u0103t\u0103\u021birea securit\u0103\u021bii codului, se propune extinderea setului de instrumente pentru testarea codului \u0219i utilizarea mai activ\u0103 a dependin\u021belor scrise \u00een limbaje de programare care ofer\u0103 o gestionare sigur\u0103 a memoriei. De asemenea, se ia \u00een considerare posibilitatea \u00eenlocuirii treptate a unor p\u0103r\u021bi din curl cu op\u021biuni scrise \u00een limbaje sigure, precum backend-ul HTTP experimental Hyper, implementat \u00een limbajul Rust. \u0412 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e \u0441\u0435\u0442\u0438 curl \u0438 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0439\u0441\u044f \u043f\u0430\u0440\u0430\u043b\u043b\u0435\u043b\u044c\u043d\u043e \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 libcurl \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-38545), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0431\u0443\u0444\u0435\u0440\u0430 \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0438 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u0443\u0442\u0438\u043b\u0438\u0442\u044b curl \u0438\u043b\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u0433\u043e libcurl, \u043a HTTPS-\u0441\u0435\u0440\u0432\u0435\u0440\u0443, \u043f\u043e\u0434\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0432 curl […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-110745","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Overflow de buffer \u00een curl \u0219i libcurl, manifestat la accesarea prin proxy SOCKS5 | ProHoster","description":"\u00cen utilitarul de transfer de date curl \u0219i \u00een biblioteca libcurl asociat\u0103 a fost identificat\u0103 o vulnerabilitate (CVE-2023-38545), care poate duce la overflow de buffer \u0219i poten\u021bial la executarea de cod.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/perepolnenie-bufera-v-curl-i-libcurl-proyavlyayushheesya-pri-obrashhenii-cherez-socks5-proksi","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 curl \u0438 libcurl, \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u044e\u0449\u0435\u0435\u0441\u044f \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 SOCKS5-\u043f\u0440\u043e\u043a\u0441\u0438 | ProHoster","og:description":"\u0412 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e \u0441\u0435\u0442\u0438 curl \u0438 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0439\u0441\u044f \u043f\u0430\u0440\u0430\u043b\u043b\u0435\u043b\u044c\u043d\u043e \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 libcurl \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-38545), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0431\u0443\u0444\u0435\u0440\u0430 \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/perepolnenie-bufera-v-curl-i-libcurl-proyavlyayushheesya-pri-obrashhenii-cherez-socks5-proksi","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-10-11T19:10:17+00:00","article:modified_time":"2023-10-11T19:10:17+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"110745","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-08 20:24:09","updated":"2026-02-08 20:24:09","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/110745","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=110745"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/110745\/revisions"}],"predecessor-version":[{"id":157908,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/110745\/revisions\/157908"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=110745"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=110745"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=110745"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"