CVE-2016-9594

2018-04-2319:29:00

Google

osv.dev

8.2 High

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.5%

JSON

curl before version 7.52.1 is vulnerable to an uninitialized random in libcurl’s internal function that returns a good 32bit random value. Having a weak or virtually non-existent random value makes the operations that use it vulnerable.

CPENameOperatorVersion
curleq7.28.0-r0
curleq7.21.1-r0
curleqcurl-7_19_6
curleqbefore_urldata_rename
curleq7.47.0-r0
curleq7.49.1-r2
curleqcurl-7_9_7
curleq7.28.1-r0
curleqcurl-7_16_0
curleqcurl-7_45_0

Name	Operator	Version
curl	eq	7.28.0-r0
curl	eq	7.21.1-r0
curl	eq	curl-7_19_6
curl	eq	before_urldata_rename
curl	eq	7.47.0-r0
curl	eq	7.49.1-r2
curl	eq	curl-7_9_7
curl	eq	7.28.1-r0
curl	eq	curl-7_16_0
curl	eq	curl-7_45_0