DeutschShown in its original language — a full translation is planned for a future version.
libcurl: Mehrere Schwachstellen
view advisory published 2018-01-24
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in libcurl ausnutzen, um einen Denial of Service Angriff durchzuführen oder vertrauliche Daten einzusehen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-1000007US | critical9.8 | — | ||
libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When asked to send custom headers in its HTTP requests, libcurl will send that set of heade… | ||||
| CVE-2018-1000005US | critical9.1 | — | ||
libcurl 7.49.0 to and including 7.57.0 contains an out bounds read in code handling HTTP/2 trailers. It was reported (https://github.com/curl/curl/pull/2231) that reading an HTTP/2… | ||||
02
references
External citations — patches, advisories, analysis.
- National Vulnerability Database vom 2018-01-24external
- National Vulnerability Database vom 2018-01-24external
- Oracle Linux Security Advisory ELSA-2018-3157 vom 2018-11-06external
- Ubuntu Security Notice USN-3554-2 vom 2018-02-01external
- Red Hat Security Advisory RHSA-2018:3157 vom 2018-10-31external
- Red Hat Security Advisory RHSA-2018:3558 vom 2018-11-14external
- Red Hat Security Advisory RHSA-2019:1543 vom 2019-06-19external
- Red Hat Security Advisory RHSA-2020:0544 vom 2020-02-18external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan