Curl versions 7.14.1 through 7.61.1 are vulnerable to a heap-based buffer over-read in the tool_msgs.c:voutf() function that may result in information exposure and denial of service.

CPENameOperatorVersion
ubuntu_linuxeq16.04
ubuntu_linuxeq14.04
ubuntu_linuxeq12.04
ubuntu_linuxeq18.04
ubuntu_linuxeq18.10
debian_linuxeq8.0
debian_linuxeq9.0
curlge7.14.1
curlle7.61.1

Name	Operator	Version
ubuntu_linux	eq	16.04
ubuntu_linux	eq	14.04
ubuntu_linux	eq	12.04
ubuntu_linux	eq	18.04
ubuntu_linux	eq	18.10
debian_linux	eq	8.0
debian_linux	eq	9.0
curl	ge	7.14.1
curl	le	7.61.1

References

www.securitytracker.com/id/1042014

access.redhat.com/errata/RHSA-2019:2181

bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16842

curl.haxx.se/docs/CVE-2018-16842.html

github.com/curl/curl/commit/d530e92f59ae9bb2d47066c3c460b25d2ffeb211

lists.debian.org/debian-lts-announce/2018/11/msg00005.html

security.gentoo.org/glsa/201903-03

usn.ubuntu.com/3805-1/

usn.ubuntu.com/3805-2/

www.debian.org/security/2018/dsa-4331

www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html

veracode 1

redhatcve 1

nessus 36

nvd 1

redhat 2

ubuntucve 1

openvas 23

cvelist 1

debiancve 1

cve 1

centos 1

osv 3

ubuntu 2

ibm 10

alpinelinux 1

archlinux 1

suse 2

debian 2

cloudfoundry 1

fedora 8

slackware 1

amazon 2

altlinux 1

freebsd 1

gentoo 1

avleonov 1

photon 4

oraclelinux 1

ics 1

kitploit 1

oracle 1

veracode

Out-of-Bounds Read

2018-11-01 08:41:05

redhatcve

CVE-2018-16842

2018-10-31 07:21:47

nessus

Fedora 29 : curl (2018-69bac0f51c)

2019-01-03 00:00:00

Scientific Linux Security Update : curl on SL7.x x86_64 (20190806)

2019-08-27 00:00:00

NewStart CGSL CORE 5.04 / MAIN 5.04 : curl Vulnerability (NS-SA-2019-0193)

2019-10-15 00:00:00

nvd

CVE-2018-16842

2018-10-31 19:29:00

redhat

(RHSA-2019:2181) Low: curl security and bug fix update

2019-08-06 08:10:38

(RHSA-2019:1543) Important: Red Hat JBoss Core Services Apache HTTP Server 2.4.29 SP2 security update

2019-06-18 19:07:29

ubuntucve

CVE-2018-16842

2018-10-31 00:00:00

openvas

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2019-1269)

2020-01-23 00:00:00

Ubuntu: Security Advisory (USN-3805-2)

2022-08-26 00:00:00

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2019-1695)

2020-01-23 00:00:00

cvelist

CVE-2018-16842

2018-10-31 19:00:00

debiancve

CVE-2018-16842

2018-10-31 19:29:00

cve

CVE-2018-16842

2018-10-31 19:29:00

centos

curl, libcurl security update

2019-08-30 02:40:11

osv

CVE-2018-16842

2018-10-31 19:29:00

curl - security update

2018-11-02 00:00:00

curl - security update

2018-11-06 00:00:00

ubuntu

curl vulnerability

2018-11-01 00:00:00

curl vulnerabilities

2018-10-31 00:00:00

ibm

Security Bulletin: IBM MQ Advanced Cloud Pak is vulnerable to a buffer overflow in the curl command (CVE-2018-16842)

2019-05-07 17:15:01

Security Bulletin: Vulnerability in Curl used in OS image for RedHat Enterprise Linux for Cloud Pak System (CVE-2018-16842)

2020-05-06 12:02:05

Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerabilities in cURL (CVE-2018-16840 CVE-2018-16842)

2023-12-07 22:45:02

alpinelinux

CVE-2018-16842

2018-10-31 19:29:00

archlinux

[ASA-201811-4] curl: multiple issues

2018-11-06 00:00:00

suse

Security update for curl (moderate)

2018-11-10 00:16:25

Security update for curl (moderate)

2018-11-10 00:22:19

debian

[SECURITY] [DSA 4331-1] curl security update

2018-11-02 20:16:42

[SECURITY] [DLA 1568-1] curl security update

2018-11-06 21:01:10

cloudfoundry

USN-3805-1: curl vulnerabilities | Cloud Foundry

2018-11-20 00:00:00

fedora

[SECURITY] Fedora 29 Update: curl-7.61.1-5.fc29

2018-11-17 05:17:14

[SECURITY] Fedora 29 Update: curl-7.61.1-4.fc29

2018-11-07 02:43:04

[SECURITY] Fedora 29 Update: curl-7.61.1-7.fc29

2019-01-24 04:34:18

slackware

[slackware-security] curl

2018-11-01 00:03:28

amazon

Low: curl

2019-01-21 23:46:00

Medium: curl

2019-02-16 00:34:00

altlinux

Security fix for the ALT Linux 8 package curl version 7.62.0-alt1

2018-10-31 00:00:00

freebsd

curl -- multiple vulnerabilities

2018-10-31 00:00:00

gentoo

cURL: Multiple vulnerabilities

2019-03-10 00:00:00

avleonov

Parsing Nessus v2 XML reports with python

2020-03-09 01:12:00

photon

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-2.0-0128

2019-02-13 00:00:00

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-1.0-0203

2019-01-18 00:00:00

Critical Photon OS Security Update - PHSA-2019-0203

2019-01-18 00:00:00

oraclelinux

curl security and bug fix update

2019-08-13 00:00:00

ics

Hitachi Energy MSM Product

2022-08-30 12:00:00

kitploit

Trivy - A Simple And Comprehensive Vulnerability Scanner For Containers, Suitable For CI

2019-11-05 12:00:00

oracle

Oracle Critical Patch Update Advisory - October 2019

2020-01-22 00:00:00

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

9 High

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

83.3%

JSON

Related for PRION:CVE-2018-16842