[ASA-201701-10] lib32-libcurl-compat: multiple issues

🗓️ 03 Jan 2017 00:00:00Reported by ArchLinuxType

archlinux🔗 security.archlinux.org👁 24 Views

lib32-libcurl-compat multiple issues, CVE-2016-9586, CVE-2016-9594, arbitrary code execution, incorrect calculation, upgrade to 7.52.1-1, remote attack

Reporter	Title	Published	Views	Family All 139
ALT Linux	Security fix for the ALT Linux 8 package curl version 7.52.0-alt1	21 Dec 201600:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 8 package curl version 7.52.1-alt1	23 Dec 201600:00	–	altlinux
IBM Security Bulletins	Security Bulletin: Vulnerabilities in cURL/libcurl affect Intel® Manycore Platform Software Stack (Intel® MPSS) for Linux and Windows	31 Jan 201902:40	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in curl affect IBM Integrated Management Module II (IMM2) for System x, Flex and BladeCenter Systems	14 Apr 202314:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in curl affect IBM Flex System Manager (FSM) (CVE-2016-9586, CVE-2017-7407 )	18 Jun 201801:38	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in curl affect IBM BladeCenter Advanced Management Module (AMM) (CVE-2016-9586, CVE-2017-7407)	14 Apr 202314:32	–	ibm
FreeBSD	cURL -- buffer overflow	21 Dec 201600:00	–	freebsd
FreeBSD	cURL -- uninitialized random vulnerability	23 Dec 201600:00	–	freebsd
Tenable Nessus	Mac OS X 10.x < 10.12.6 Multiple Vulnerabilities	27 Jul 201700:00	–	nessus
Tenable Nessus	Amazon Linux AMI : curl (ALAS-2017-806)	23 Mar 201700:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Arch Linux	–	any	lib32-libcurl-compat	7.52.1-1	lib32-libcurl-compat-7.52.1-1-any.pkg.tar.zst

Source	Link
security	www.security.archlinux.org/AVG-116
bugs	www.bugs.archlinux.org/task/52247
curl	www.curl.haxx.se/docs/adv_20161221A.html
curl	www.curl.haxx.se/docs/adv_20161223.html
security	www.security.archlinux.org/CVE-2016-9586
security	www.security.archlinux.org/CVE-2016-9594

03 Jan 2017 00:00Current

0.9Low risk

Vulners AI Score0.9

CVSS 26.8

CVSS 36.5 - 8.1

EPSS0.01009

SSVC