Windows 10: Update on Patch for Curl

Can I get an update on the fix for CVE-2023-38545

:)

 

Curl Update for Win 11

Hi,

The Curl Executable in C:\Windows\System32 (CURL.EXE) is version 7.83.1 which is lower than 7.87.0 and is affeacted by a use-after-free vulnerability.

Curl can be asked to tunnel virtually all protocols it supports through an HTTP proxy. HTTP proxies can (and often do) deny such tunnel operations.

When getting denied to tunnel the specific protocols SMB or TELNET, curl would use a heap-allocated struct after it had been freed, in its transfer shutdown code path.

Referrence:

curl - HTTP Proxy deny use after free - CVE-2022-43552

When to expect an offical update from Windows as their is a latest version available on curl for Windows...

Regards

 

Curl Update for Win 11

Hi Rahul and thanks for reaching out. My name is Prosper. I'm a Windows 10 expert and a user like you. I'll be happy to help you out today.

Here are some steps you can take to fix security vulnerability in the version of the Curl executable:

- Download the latest version for your system architecture 32/64-bit from the Curl official website 'curl - Download

- Extract the archive that you just downloaded,

- and then replace the existing one in C:\Windows\System32 with the one you just extract.

Then restart the computer.

I hope this helps! Please let me know if you have any further questions.

Sincerely,

Prosper

Independent Advisor

 

eDellRoot Certificate Problem: Patch Available To Fix It Now ?


Hi,

The Patch you suggested worked well, and fast.
Sure a lot easier than following 17 steps !

Any idea when the new Patch for the new problem will be available ?

Will it be posted here ? Where ?

Thanks again for all the help,
Bob