Curl versions 7.14.1 through 7.61.1 are vulnerable to a heap-based buffer over-read in the tool_msgs.c:voutf() function that may result in information exposure and denial of service.

CPENameOperatorVersion
curleq7.28.0-r0
curleq7.21.1-r0
curleqcurl-7_19_6
curleq7.47.0-r0
curleq7.28.1-r0
curleqcurl-7_16_0
curleqcurl-7_45_0
curleq7.31.0-r0
curleqcurl-7_37_1
curleq7.44.0-r0

Name	Operator	Version
curl	eq	7.28.0-r0
curl	eq	7.21.1-r0
curl	eq	curl-7_19_6
curl	eq	7.47.0-r0
curl	eq	7.28.1-r0
curl	eq	curl-7_16_0
curl	eq	curl-7_45_0
curl	eq	7.31.0-r0
curl	eq	curl-7_37_1
curl	eq	7.44.0-r0

Rows per page:

1-10 of 1881

References

www.securitytracker.com/id/1042014

access.redhat.com/errata/RHSA-2019:2181

bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16842

curl.haxx.se/docs/CVE-2018-16842.html

github.com/curl/curl/commit/d530e92f59ae9bb2d47066c3c460b25d2ffeb211

lists.debian.org/debian-lts-announce/2018/11/msg00005.html

security.gentoo.org/glsa/201903-03

usn.ubuntu.com/3805-1/

usn.ubuntu.com/3805-2/

www.debian.org/security/2018/dsa-4331

www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html

openvas 23

nessus 36

ubuntucve 1

nvd 1

redhat 2

veracode 1

redhatcve 1

cve 1

centos 1

ubuntu 2

prion 1

ibm 10

cvelist 1

debiancve 1

alpinelinux 1

suse 2

archlinux 1

debian 2

osv 2

cloudfoundry 1

fedora 8

altlinux 1

slackware 1

amazon 2

freebsd 1

gentoo 1

avleonov 1

photon 4

oraclelinux 1

ics 1

kitploit 1

oracle 1

openvas

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2019-1269)

2020-01-23 00:00:00

Ubuntu: Security Advisory (USN-3805-2)

2022-08-26 00:00:00

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2019-1695)

2020-01-23 00:00:00

nessus

Scientific Linux Security Update : curl on SL7.x x86_64 (20190806)

2019-08-27 00:00:00

NewStart CGSL CORE 5.04 / MAIN 5.04 : curl Vulnerability (NS-SA-2019-0193)

2019-10-15 00:00:00

Fedora 29 : curl (2018-69bac0f51c)

2019-01-03 00:00:00

ubuntucve

CVE-2018-16842

2018-10-31 00:00:00

nvd

CVE-2018-16842

2018-10-31 19:29:00

redhat

(RHSA-2019:2181) Low: curl security and bug fix update

2019-08-06 08:10:38

(RHSA-2019:1543) Important: Red Hat JBoss Core Services Apache HTTP Server 2.4.29 SP2 security update

2019-06-18 19:07:29

veracode

Out-of-Bounds Read

2018-11-01 08:41:05

redhatcve

CVE-2018-16842

2018-10-31 07:21:47

cve

CVE-2018-16842

2018-10-31 19:29:00

centos

curl, libcurl security update

2019-08-30 02:40:11

ubuntu

curl vulnerability

2018-11-01 00:00:00

curl vulnerabilities

2018-10-31 00:00:00

prion

Heap overflow

2018-10-31 19:29:00

ibm

Security Bulletin: IBM MQ Advanced Cloud Pak is vulnerable to a buffer overflow in the curl command (CVE-2018-16842)

2019-05-07 17:15:01

Security Bulletin: Vulnerability in Curl used in OS image for RedHat Enterprise Linux for Cloud Pak System (CVE-2018-16842)

2020-05-06 12:02:05

Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerabilities in cURL (CVE-2018-16840 CVE-2018-16842)

2023-12-07 22:45:02

cvelist

CVE-2018-16842

2018-10-31 19:00:00

debiancve

CVE-2018-16842

2018-10-31 19:29:00

alpinelinux

CVE-2018-16842

2018-10-31 19:29:00

suse

Security update for curl (moderate)

2018-11-10 00:16:25

Security update for curl (moderate)

2018-11-10 00:22:19

archlinux

[ASA-201811-4] curl: multiple issues

2018-11-06 00:00:00

debian

[SECURITY] [DSA 4331-1] curl security update

2018-11-02 20:16:42

[SECURITY] [DLA 1568-1] curl security update

2018-11-06 21:01:10

osv

curl - security update

2018-11-02 00:00:00

curl - security update

2018-11-06 00:00:00

cloudfoundry

USN-3805-1: curl vulnerabilities | Cloud Foundry

2018-11-20 00:00:00

fedora

[SECURITY] Fedora 29 Update: curl-7.61.1-5.fc29

2018-11-17 05:17:14

[SECURITY] Fedora 29 Update: curl-7.61.1-4.fc29

2018-11-07 02:43:04

[SECURITY] Fedora 29 Update: curl-7.61.1-7.fc29

2019-01-24 04:34:18

altlinux

Security fix for the ALT Linux 8 package curl version 7.62.0-alt1

2018-10-31 00:00:00

slackware

[slackware-security] curl

2018-11-01 00:03:28

amazon

Low: curl

2019-01-21 23:46:00

Medium: curl

2019-02-16 00:34:00

freebsd

curl -- multiple vulnerabilities

2018-10-31 00:00:00

gentoo

cURL: Multiple vulnerabilities

2019-03-10 00:00:00

avleonov

Parsing Nessus v2 XML reports with python

2020-03-09 01:12:00

photon

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-2.0-0128

2019-02-13 00:00:00

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-1.0-0203

2019-01-18 00:00:00

Critical Photon OS Security Update - PHSA-2019-0203

2019-01-18 00:00:00

oraclelinux

curl security and bug fix update

2019-08-13 00:00:00

ics

Hitachi Energy MSM Product

2022-08-30 12:00:00

kitploit

Trivy - A Simple And Comprehensive Vulnerability Scanner For Containers, Suitable For CI

2019-11-05 12:00:00

oracle

Oracle Critical Patch Update Advisory - October 2019

2020-01-22 00:00:00

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

9.3 High

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

83.3%

JSON

Related for OSV:CVE-2018-16842