CVE-2018-0500

2018-07-1113:29:00

Alpine Linux Development Team

security.alpinelinux.org

0.013 Low

EPSS

Percentile

86.0%

JSON

Curl_smtp_escape_eob in lib/smtp.c in curl 7.54.1 to and including curl 7.60.0 has a heap-based buffer overflow that might be exploitable by an attacker who can control the data that curl transmits over SMTP with certain settings (i.e., use of a nonstandard --limit-rate argument or CURLOPT_BUFFERSIZE value).

OSVersionArchitecturePackageVersionFilename
Alpineedge-mainnoarchcurl< 7.61.0-r0UNKNOWN
Alpine3.10-mainnoarchcurl< 7.61.0-r0UNKNOWN
Alpine3.11-mainnoarchcurl< 7.61.0-r0UNKNOWN
Alpine3.12-mainnoarchcurl< 7.61.0-r0UNKNOWN
Alpine3.13-mainnoarchcurl< 7.61.0-r0UNKNOWN
Alpine3.14-mainnoarchcurl< 7.61.0-r0UNKNOWN
Alpine3.15-mainnoarchcurl< 7.61.0-r0UNKNOWN
Alpine3.16-mainnoarchcurl< 7.61.0-r0UNKNOWN
Alpine3.17-mainnoarchcurl< 7.61.0-r0UNKNOWN
Alpine3.18-mainnoarchcurl< 7.61.0-r0UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	edge-main	noarch	curl	< 7.61.0-r0	UNKNOWN
Alpine	3.10-main	noarch	curl	< 7.61.0-r0	UNKNOWN
Alpine	3.11-main	noarch	curl	< 7.61.0-r0	UNKNOWN
Alpine	3.12-main	noarch	curl	< 7.61.0-r0	UNKNOWN
Alpine	3.13-main	noarch	curl	< 7.61.0-r0	UNKNOWN
Alpine	3.14-main	noarch	curl	< 7.61.0-r0	UNKNOWN
Alpine	3.15-main	noarch	curl	< 7.61.0-r0	UNKNOWN
Alpine	3.16-main	noarch	curl	< 7.61.0-r0	UNKNOWN
Alpine	3.17-main	noarch	curl	< 7.61.0-r0	UNKNOWN
Alpine	3.18-main	noarch	curl	< 7.61.0-r0	UNKNOWN

Rows per page:

1-10 of 171

CVE-2018-0500

Related