Heap-based Buffer Overflow

2019-05-2703:15:11

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.07 Low

EPSS

Percentile

94.0%

JSON

libcurl.so is vulnerable to heap-based buffer overflow. The function tftp_receive_packet() that receives data from a TFTP server calls recvfrom() with the default size instead of the size that was allocated, potentially resulting in an overwrite of the heap memory.

CPENameOperatorVersion
libcurl.sole4.5.0
curleq7.61.1__11.el8
curleq7.29.0__54.el7_7.2
curleq7.29.0__46.el7
curleq7.29.0__51.el7_6.3
curleq7.29.0__54.el7
curleq7.61.1__8.el8
curleq7.29.0__32.el7
curleq7.29.0__54.el7_7.1
curleq7.29.0__51.el7

Name	Operator	Version
libcurl.so	le	4.5.0
curl	eq	7.61.1__11.el8
curl	eq	7.29.0__54.el7_7.2
curl	eq	7.29.0__46.el7
curl	eq	7.29.0__51.el7_6.3
curl	eq	7.29.0__54.el7
curl	eq	7.61.1__8.el8
curl	eq	7.29.0__32.el7
curl	eq	7.29.0__54.el7_7.1
curl	eq	7.29.0__51.el7