CVE ID:	CVE-2023-38039
Description:	When curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed later via the libcurl headers API. However, curl did not have a limit in how many or how large headers it would accept in a response, allowing a malicious server to stream an endless series of headers and eventually cause curl to run out of heap memory.
Test IDs:	1.3.6.1.4.1.25623.1.1.12.2023.6363.1   1.3.6.1.4.1.25623.1.0.884873   1.3.6.1.4.1.25623.1.0.884824   1.3.6.1.4.1.25623.1.0.833532   1.3.6.1.4.1.25623.1.0.884875   1.3.6.1.4.1.25623.1.1.13.2023.256.01   1.3.6.1.4.1.25623.1.1.4.2023.3692.1
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2023-38039 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5DCZMYODALBLVOXVJEN2LF2MLANEYL4F/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M6KGKB2JNZVT276JYSKI6FV2VFJUGDOJ/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TEAWTYHC3RT6ZRS5OZRHLAIENVN6CCIS/ http://seclists.org/fulldisclosure/2023/Oct/17 http://seclists.org/fulldisclosure/2024/Jan/34 http://seclists.org/fulldisclosure/2024/Jan/37 http://seclists.org/fulldisclosure/2024/Jan/38 https://security.gentoo.org/glsa/202310-12 https://www.insyde.com/security-pledge/SA-2023064 https://hackerone.com/reports/2072338 https://hackerone.com/reports/2072338