cve/2016/CVE-2016-9594.md
2024-05-26 14:27:05 +02:00

687 B

CVE-2016-9594

Description

curl before version 7.52.1 is vulnerable to an uninitialized random in libcurl's internal function that returns a good 32bit random value. Having a weak or virtually non-existent random value makes the operations that use it vulnerable.

POC

Reference

No PoCs from references.

Github