Lucene search

K
prionPRIOn knowledge basePRION:CVE-2016-9953
HistoryMar 12, 2018 - 9:29 p.m.

Out-of-bounds

2018-03-1221:29:00
PRIOn knowledge base
www.prio-n.com
1

8.2 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.9%

The verify_certificate function in lib/vtls/schannel.c in libcurl 7.30.0 through 7.51.0, when built for Windows CE using the schannel TLS backend, allows remote attackers to obtain sensitive information, cause a denial of service (crash), or possibly have unspecified other impact via a wildcard certificate name, which triggers an out-of-bounds read.

CPENameOperatorVersion
curlge7.30.0
curlle7.51.0

8.2 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.9%