Veracode Vulnerability DatabaseVERACODE:19621Out-Of-Bounds Read
0.009 Low
EPSS
Percentile
82.7%
libcurl is vulnerable to out-of-bounds read attacks. A remote server could return a specially crafted response to a PWD command issued by the target connected client library to trigger a parsing error and cause libcurl to crash.
References
www.debian.org/security/2017/dsa-3992
www.securityfocus.com/bid/101115
www.securitytracker.com/id/1039509
access.redhat.com/documentation/en-us/red_hat_software_collections/3/html/3.2_release_notes/chap-rhscl#sect-RHSCL-Changes-httpd
access.redhat.com/errata/RHSA-2018:2486
access.redhat.com/errata/RHSA-2018:3558
access.redhat.com/security/updates/classification/#moderate
bugzilla.redhat.com/show_bug.cgi?id=1518737
bugzilla.redhat.com/show_bug.cgi?id=1540167
bugzilla.redhat.com/show_bug.cgi?id=1558450
bugzilla.redhat.com/show_bug.cgi?id=1628389
bugzilla.redhat.com/show_bug.cgi?id=1633260
bugzilla.redhat.com/show_bug.cgi?id=1634830
bugzilla.redhat.com/show_bug.cgi?id=1640722
bugzilla.redhat.com/show_bug.cgi?id=1646937
bugzilla.redhat.com/show_bug.cgi?id=1648928
curl.haxx.se/673d0cd8.patch
curl.haxx.se/docs/adv_20171004.html
lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b@%3Cissues.bookkeeper.apache.org%3E
lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4@%3Cissues.bookkeeper.apache.org%3E
security.gentoo.org/glsa/201712-04
support.apple.com/HT208331
Related
