DeutschShown in its original language — a full translation is planned for a future version.
cURL: Mehrere Schwachstellen
view advisory published 2018-03-13
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in cURL ausnutzen, um Dateien zu manipulieren, Daten offenzulegen oder einen Denial of Service zu verursachen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-1000122US | critical9.1 | — | ||
A buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling code that allows an attacker to cause a denial of service or information leakage | ||||
| CVE-2018-1000121US | high7.5 | — | ||
A NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code that allows an attacker to cause a denial of service | ||||
| CVE-2018-1000120US | critical9.8 | — | ||
A buffer overflow exists in curl 7.12.3 to and including curl 7.58.0 in the FTP URL handling that allows an attacker to cause a denial of service or worse. | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2018-3157 vom 2018-11-06external
- Red Hat Security Advisory RHSA-2018:3157 vom 2018-10-31external
- Red Hat Security Advisory RHSA-2018:3558 vom 2018-11-14external
- Red Hat Security Advisory RHSA-2019:1543 vom 2019-06-19external
- Red Hat Security Advisory RHSA-2020:0544 vom 2020-02-18external
- Red Hat Security Advisory RHSA-2020:0594 vom 2020-02-25external
- Curl Security Advisory vom 2018-03-13external
- Curl Security Advisory vom 2018-03-13external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan