DeutschShown in its original language — a full translation is planned for a future version.
cURL: Mehrere Schwachstellen
view advisory published 2018-10-30
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in cURL und libcurl ausnutzen, um Informationen offenzulegen, einen Denial of Service Zustand herbeizuführen und um einen nicht näher spezifizierten Angriff durchzuführen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-16842US | critical9.1 | — | ||
Curl versions 7.14.1 through 7.61.1 are vulnerable to a heap-based buffer over-read in the tool_msgs.c:voutf() function that may result in information exposure and denial of servic… | ||||
| CVE-2018-16840US | critical9.8 | — | ||
A heap use-after-free flaw was found in curl versions from 7.59.0 through 7.61.1 in the code related to closing an easy handle. When closing and cleaning up an 'easy' handle in the… | ||||
| CVE-2018-16839US | critical9.8 | — | ||
Curl versions 7.33.0 through 7.61.1 are vulnerable to a buffer overrun in the SASL authentication code that may lead to denial of service. | ||||
02
references
External citations — patches, advisories, analysis.
- Ubuntu Security Notice USN-3805-1 vom 2018-11-01external
- Red Hat Security Advisory RHSA-2019:2181 vom 2019-08-06external
- Curl CVE-2018-16839 vom 2018-10-31external
- Curl CVE-2018-16840 vom 2018-10-31external
- Curl CVE-2018-16842 vom 2018-10-31external
- Gentoo Security Advisory GLSA 201903-03 vom 2019-03-10external
- WID-SEC-W-2023-1641 - CSAF Versionself
- WID-SEC-2023-1641 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan