curl can be told to parse a `.netrc` file for credentials. If that file endsin a line with 4095 consecutive non-white space letters and no newline, curlwould first read past the end of the stack-based buffer, and if the readworks, write a z…

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2022-35260 · Microsoft / collected KEV context

cve-program · CVE-2022-35260

• https://hackerone.com/reports/1721098
• https://security.gentoo.org/glsa/202212-01
• https://security.netapp.com/advisory/ntap-20230110-0006/
• https://support.apple.com/kb/HT213604
• https://support.apple.com/kb/HT213605
• http://seclists.org/fulldisclosure/2023/Jan/20
• http://seclists.org/fulldisclosure/2023/Jan/19

No related operational record is retained in the current change model.