Lucene search
Veracode Vulnerability DatabaseVERACODE:6337HistoryMay 21, 2018 - 8:51 a.m.
Information Disclosure
2018-05-2108:51:58
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15
0.001 Low
EPSS
Percentile
43.3%
libcurl.so is vulnerable to information disclosures. When running with the --write-out command, the application skips the end of the string zero byte if the string ends with % or \\\\ , causing the application to read out of the buffer and disclose sensitive information.
Related
nessus
nessus
FreeBSD : cURL -- potential memory disclosure (04f29189-1a05-11e7-bc6e-b499baebfeaf)
2017-04-06 00:00:00
Fedora 25 : curl (2017-b38b98727e)
2017-04-10 00:00:00
EulerOS Virtualization for ARM 64 3.0.2.0 : curl (EulerOS-SA-2019-1697)
2019-07-09 00:00:00
redhatcve
redhatcve
CVE-2017-7407
2017-04-05 12:17:59
osv
osv
CVE-2017-7407
2017-04-03 20:59:00
curl - security update
2017-04-04 00:00:00
nvd
nvd
CVE-2017-7407
2017-04-03 20:59:00
cve
cve
CVE-2017-7407
2017-04-03 20:59:00
freebsd
freebsd
cURL -- potential memory disclosure
2017-04-03 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2019-1697)
2020-01-23 00:00:00
Fedora Update for curl FEDORA-2017-b38b98727e
2017-04-10 00:00:00
Debian: Security Advisory (DLA-883-1)
2018-01-16 00:00:00
ibm
ibm
amazon
amazon
Low: curl
2017-06-22 19:24:00
alpinelinux
alpinelinux
CVE-2017-7407
2017-04-03 20:59:00
prion
prion
Heap overflow
2017-04-03 20:59:00
ubuntucve
ubuntucve
CVE-2017-7407
2017-04-03 00:00:00
debian
debian
[SECURITY] [DLA 883-1] curl security update
2017-04-04 13:27:06
cvelist
cvelist
CVE-2017-7407
2017-04-03 20:00:00
fedora
fedora
[SECURITY] Fedora 26 Update: curl-7.53.1-4.fc26
2017-04-11 13:49:21
[SECURITY] Fedora 25 Update: curl-7.51.0-6.fc25
2017-04-09 21:53:41
debiancve
debiancve
CVE-2017-7407
2017-04-03 20:59:00
gentoo
gentoo
cURL: Multiple vulnerabilities
2017-09-17 00:00:00
cloudfoundry
cloudfoundry
USN-3441-1: curl vulnerabilities | Cloud Foundry
2017-11-01 00:00:00
ubuntu
ubuntu
curl vulnerabilities
2017-10-10 00:00:00
curl vulnerabilities
2017-10-23 00:00:00
mageia
mageia
Updated curl packages fix security vulnerability
2018-01-03 19:40:26
redhat
redhat
(RHSA-2018:3558) Moderate: httpd24 security, bug fix, and enhancement update
2018-11-13 08:00:33
suse
suse
Security update for SLES 12-SP2 Docker image (important)
2017-10-11 03:08:09
Security update for SLES 12-SP1 Docker image (important)
2017-10-11 03:07:32
Security update for SLES 12 Docker image (important)
2017-10-11 03:06:53
oracle
oracle
Oracle Critical Patch Update - October 2018
2018-12-18 00:00:00