CVE-2023-38545

This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy<br /> handshake.<br /> <br /> When curl is asked to pass along the host name to the SOCKS5 proxy to allow<br /> that to resolve the address instead of it getting done by curl itself, the<br /> maximum length that host name can be is 255 bytes.<br /> <br /> If the host name is detected to be longer, curl switches to local name<br /> resolving and instead passes on the resolved address only. Due to this bug,<br /> the local variable that means "let the host resolve the name" could get the<br /> wrong value during a slow SOCKS5 handshake, and contrary to the intention,<br /> copy the too long host name to the target buffer instead of copying just the<br /> resolved address there.<br /> <br /> The target buffer being a heap based buffer, and the host name coming from the<br /> URL that curl has been told to operate with.