CVE-2023-38545Proof of concept (PoC) published · CISA
Out-of-bounds write in Curl
CVSS score
8.8
EPSS probability
%78.7
Risk score
6.9
Published
3 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
GitHub
This script is designed to exploit a heap buffer overflow vulnerability in a socks5 proxy server.
Makefile Go / Python
GitHub
A proof of concept for testing CVE-2023-38545 against local curl
Makefile Go / Python
GitHub
CVE-2023-38545 POC for the curl command line tool
Makefile Go / Python
Simple PoC causing overflow
Makefile Go / Python
GitHub
Dockerfile containing all the necessary setup files to demo the exploit
Makefile Go / Python
Similar Vulnerabilities
7.8
CVE-2019-5436
Vulnerability in Curl
C
Patch verifiedEPSS %50
8.6
CVE-2024-2398
HTTP/2 push headers memory-leak
C
Patch verifiedEPSS %36
6.3
CVE-2024-7264
ASN.1 date parser overread
C
Patch verifiedEPSS %20
3.7
CVE-2019-5435
Vulnerability in Curl
C
Patch verifiedEPSS %6
7.3
CVE-2025-0725
gzip integer overflow
C
Patch verifiedEPSS %2
6.3
CVE-2024-2379
QUIC certificate check bypass with wolfSSL
C
Patch verifiedEPSS %2
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2023-38545"