[ASA-201811-7] lib32-libcurl-gnutls: arbitrary code execution

🗓️ 06 Nov 2018 00:00:00Reported by ArchLinuxType

archlinux

archlinux🔗 security.archlinux.org👁 35 Views

vulnerable lib32-libcurl-gnutls to arbitrary code execution, upgrade to version 7.62.0-1

Reporter	Title	Published	Views	Family All 147
IBM Security Bulletins	Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by vulnerabilities in cURL (CVE-2018-14618 CVE-2018-16840 CVE-2018-16842)	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerabilities in cURL (CVE-2018-16840 CVE-2018-16842)	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: The Community Edition of IBM ILOG CPLEX Optimization Studio is affected by a vulnerability in libcurl (CVE-2018-16840)	19 Nov 201815:50	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in Red Hat® Enterprise Linux (RHEL) Server shipped with PurePower Integrated Manager (PPIM)	20 Dec 201908:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities affecting IBM Watson Studio in Cloud Pak for Data are addressed	3 Mar 202514:36	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities affect IBM® Cloud Private - fluentd	12 Feb 201918:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in libCurl affects IBM Watson Studio Local	20 Dec 201913:58	–	ibm
IBM Security Bulletins	Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801-s, 1801-t and 1801-u	5 Dec 201822:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM BladeCenter Advanced Management Module (AMM) is affected by vulnerabilities in cURL (CVE-2018-16840 CVE-2018-16842)	11 Apr 201920:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Event Streams is affected by cURL vulnerabilities	17 Dec 201816:15	–	ibm

OS	OS Version	Architecture	Package	Package Version	Filename
Arch Linux	–	any	lib32-libcurl-gnutls	7.62.0-1	lib32-libcurl-gnutls-7.62.0-1-any.pkg.tar.zst

Source	Link
security	www.security.archlinux.org/AVG-798
curl	www.curl.haxx.se/docs/CVE-2018-16839.html
github	www.github.com/curl/curl/commit/f3a24d7916b9173c69a3e0ee790102993833d6c5
curl	www.curl.haxx.se/docs/CVE-2018-16840.html
github	www.github.com/curl/curl/commit/81d135d67155c5295b1033679c606165d4e28f3f
security	www.security.archlinux.org/CVE-2018-16839
security	www.security.archlinux.org/CVE-2018-16840

06 Nov 2018 00:00Current

1Low risk

Vulners AI Score1

CVSS 27.5

CVSS 34.3 - 9.8

CVSS 3.19.8

EPSS0.00346

SSVC

arbitrary code execution remote vulnerability lib32-libcurl-gnutls cve-2018-16839 cve-2018-16840 unix