cve 2024 2398

  1. CVE-2024-2398: Curl HTTP/2 Push Memory Leak and Azure Linux Attestation

    The curl project’s advisory for CVE-2024-2398 describes a straightforward but consequential bug: when an application enables HTTP/2 server push, libcurl can leak previously allocated header memory if a pushed stream exceeds the library’s header limit and is aborted — a leak that can amount to...