Speculative Execution Side-Channel in `curl`

身份认证 / Authentication Bypass by Primary Weakness / #3124490

厂商

curl

严重程度

低危

赏金

—

弱点

Authentication Bypass by Primary Weakness

研究员

@geloyz

披露日期

2025-07-01

资产

https://github.com/curl/curl

CVE

—

该报告还没有中文解读。

🛡️ Penetration Testing Report ==========

if (strncmp(hostname, "https://", 8) == 0) {
    port = 443;  // Preload TLS path
} else {
    port = 80;   // Preload HTTP handling
}