libcurl.so is vulnerable to denial of service (DoS). The library does not correctly check input data, allowing an attacker or compromised NTLM server to perform out-of-bounds buffer reading by providing a bad length + offset
combination as input.
www.securityfocus.com/bid/106947
access.redhat.com/errata/RHSA-2019:3701
bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16890
cert-portal.siemens.com/productcert/pdf/ssa-436177.pdf
curl.haxx.se/docs/CVE-2018-16890.html
github.com/curl/curl/commit/b780b30d1377adb10bbe774835f49e9b237fb9bb
lists.apache.org/thread.html/8338a0f605bdbb3a6098bb76f666a95fc2b2f53f37fa1ecc89f1146f@%3Cdevnull.infra.apache.org%3E
security.netapp.com/advisory/ntap-20190315-0001/
support.f5.com/csp/article/K03314397?utm_source=f5support&utm_medium=RSS
usn.ubuntu.com/3882-1/
www.debian.org/security/2019/dsa-4386
www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html