Lucene search
Veracode Vulnerability DatabaseVERACODE:31126HistoryJul 05, 2021 - 7:05 a.m.
Arbitrary Code Execution
2021-07-0507:05:18
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
0.001 Low
EPSS
Percentile
25.7%
libcurl.so is vulnerable to arbitrary code execution. When built with SSPI or telnet is enabled, a local user is able to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse (1) security.dll, (2) secur32.dll, or (3) ws2_32.dll in the application or current working directory.
| CPE | Name | Operator | Version |
|---|---|---|---|
| curl | le | 7.30.0.2 | |
| libcurl.so | le | 4.7.0.debug | |
| curl | le | 7.30.0.2 | |
| libcurl.so | le | 4.7.0.debug |
Related
kaspersky
kaspersky
KLA10817 Privilege escalation in cURL
2016-05-29 00:00:00
debiancve
debiancve
CVE-2016-4802
2016-06-24 17:59:00
prion
prion
Design/Logic Flaw
2016-06-24 17:59:00
cvelist
cvelist
CVE-2016-4802
2016-06-24 17:00:00
ubuntucve
ubuntucve
CVE-2016-4802
2016-06-24 00:00:00
cve
cve
CVE-2016-4802
2016-06-24 17:59:00
nvd
nvd
CVE-2016-4802
2016-06-24 17:59:00
nessus
nessus
Tenable SecurityCenter < 5.4.0 Multiple Vulnerabilities (TNS-2016-12)
2016-07-26 00:00:00
kitploit
kitploit
rosalinux
rosalinux
Advisory ROSA-SA-2021-1818
2021-07-02 16:36:57
oracle
oracle
Oracle Critical Patch Update Advisory - April 2017
2017-04-18 00:00:00