一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年10月21日

CVE-2026-92387 – By permanently omitting the final control-response line, a malicious FTP, IMAP, POP3, or S

未分类
📑 文章目录

By permanently omitting the final control-response line, a malicious FTP,
IMAP, POP3, or SMTP server can exploit libcurl and completely bypass its
configured transfer timeout mechanism, indefinitely blocking all concurrent
transfers bound to the same multi-handle.