Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:7152
HistoryJul 25, 2018 - 5:49 a.m.

Denial Of Service (DoS)

2018-07-2505:49:29
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9

0.093 Low

EPSS

Percentile

94.7%

JSON

libcurl.so is susceptible to denial of service(DoS). The vulnerability exists because the curl_easy_unescape function in lib/escape.c only terminates string parsing when a zero byte is used, leading to heap corruption that can crash the application or cause arbitrary code to be executed.

CPENameOperatorVersion
libcurl.sole4.7.0

Related

nessus 26
openvas 27
altlinux 1
ubuntu 1
seebug 1
veracode 1
prion 1
oraclelinux 1
securityvulns 2
nvd 1
cvelist 1
centos 1
debian 2
fedora 8
mageia 1
cve 1
redhat 2
freebsd 1
slackware 1
ubuntucve 1
debiancve 1
ibm 8
gentoo 1
ics 1
oracle 1
nessus
nessus
Fedora 17 : curl-7.24.0-10.fc17 (2013-11568)
2013-07-23 00:00:00
SuSE 10 Security Update : curl (ZYPP Patch Number 8614)
2013-07-11 00:00:00
FreeBSD : cURL library -- heap corruption in curl_easy_unescape (01cf67b3-dc3b-11e2-a6cd-c48508086173)
2013-06-24 00:00:00
openvas
openvas
Ubuntu Update for curl USN-1894-1
2013-07-05 00:00:00
CentOS Update for curl CESA-2013:0983 centos5
2013-06-27 00:00:00
CentOS Update for curl CESA-2013:0983 centos6
2013-06-27 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 6 package curl version 7.24.0-alt1.M60P.1
2013-06-24 00:00:00
ubuntu
ubuntu
curl vulnerability
2013-07-02 00:00:00
seebug
seebug
cURL/libcURL 'curl_easy_unescape()'堆内存破坏漏洞
2013-06-26 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 08:55:13
prion
prion
Heap overflow
2013-07-31 13:20:00
oraclelinux
oraclelinux
curl security update
2013-06-25 00:00:00
securityvulns
securityvulns
libcurl uninitialized memory reference
2013-07-01 00:00:00
[ MDVSA-2013:180 ] curl
2013-07-01 00:00:00
nvd
nvd
CVE-2013-2174
2013-07-31 13:20:25
cvelist
cvelist
CVE-2013-2174
2013-07-31 10:00:00
centos
centos
curl, libcurl security update
2013-06-26 02:20:36
debian
debian
[SECURITY] [DSA 2713-1] curl security update
2013-06-24 21:18:14
[SECURITY] [DSA 2713-1] curl security update
2013-06-24 21:18:14
fedora
fedora
[SECURITY] Fedora 19 Update: curl-7.29.0-7.fc19
2013-06-29 18:44:03
[SECURITY] Fedora 17 Update: curl-7.24.0-10.fc17
2013-07-23 01:11:16
[SECURITY] Fedora 19 Update: haproxy-1.4.24-1.fc19
2013-06-29 18:15:34
mageia
mageia
Updated curl packages fix CVE-2013-2174
2013-06-26 22:44:41
cve
cve
CVE-2013-2174
2013-07-31 13:20:25
redhat
redhat
(RHSA-2013:0983) Moderate: curl security update
2013-06-25 00:00:00
(RHSA-2013:1076) Important: rhev-hypervisor6 security and bug fix update
2013-07-16 00:00:00
freebsd
freebsd
cURL library -- heap corruption in curl_easy_unescape
2013-06-22 00:00:00
slackware
slackware
[slackware-security] curl
2013-06-23 22:07:06
ubuntucve
ubuntucve
CVE-2013-2174
2013-06-24 00:00:00
debiancve
debiancve
CVE-2013-2174
2013-07-31 13:20:25
ibm
ibm
Security Bulletin: Vulnerabilities in cURL affect System x Integrated Management Module (IMM) (CVE-2013-2174, CVE-2014-0015, CVE-2014-138, CVE-2014-0139)
2019-01-31 01:35:01
Security Bulletin: Vulnerabilities in cURL affect System x Integrated Management Module (IMM) (CVE-2013-2174, CVE-2014-0015, CVE-2014-0138, CVE-2014-0139)
2019-01-31 01:35:01
Security Bulletin: Vulnerabilities in curl affect IBM Chassis Management Module (CMM) (CVE-2013-4545, CVE-2014-0015, CVE-2014-0138, CVE-2014-0139, CVE-2013-2174)
2019-01-31 01:55:01
gentoo
gentoo
cURL: Multiple vulnerabilities
2014-01-20 00:00:00
ics
ics
Hitachi Energy MSM Product
2022-08-30 12:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - July 2015
2015-07-14 00:00:00

0.093 Low

EPSS

Percentile

94.7%

JSON
Related for VERACODE:7152
nessus26openvas27altlinux1ubuntu1seebug1veracode1prion1oraclelinux1securityvulns2nvd1cvelist1centos1debian2fedora8mageia1cve1redhat2freebsd1slackware1ubuntucve1debiancve1ibm8gentoo1ics1oracle1