CVE-2016-9586

2018-04-2318:29:00

Google

osv.dev

0.011 Low

EPSS

Percentile

84.8%

JSON

curl before version 7.52.0 is vulnerable to a buffer overflow when doing a large floating point output in libcurl’s implementation of the printf() functions. If there are any application that accepts a format string from the outside without necessary input filtering, it could allow remote attacks.

CPENameOperatorVersion
curleq7.28.0-r0
curleq7.21.1-r0
curleqcurl-7_19_6
curleqbefore_urldata_rename
curleq7.47.0-r0
curleq7.49.1-r2
curleqcurl-7_9_7
curleq7.28.1-r0
curleqcurl-7_16_0
curleqcurl-7_45_0

Name	Operator	Version
curl	eq	7.28.0-r0
curl	eq	7.21.1-r0
curl	eq	curl-7_19_6
curl	eq	before_urldata_rename
curl	eq	7.47.0-r0
curl	eq	7.49.1-r2
curl	eq	curl-7_9_7
curl	eq	7.28.1-r0
curl	eq	curl-7_16_0
curl	eq	curl-7_45_0