K10196624 : libcurl vulnerability CVE-2016-8618

Security Advisory Description

The libcurl API function called curl_maprintf() before version 7.51.0 can be tricked into doing a double-free due to an unsafe size_t multiplication, on systems using 32 bit size_t variables. (CVE-2016-8618)

Impact

A custom monitor or script that calls the curl command may allow unauthorized disclosure of information, unauthorized modification, and disruption of service. Thebig3d process, which includes thelibcurl library, may allow unauthorized disclosure of information, unauthorized modification, and disruption of service.