The vulnerability of the Curl_ntlm_core_mk_nt_hash function in the software’s interaction with curl servers allows a attacker to cause a service failure or execute arbitrary code.

🗓️ 05 Feb 2019 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 4 Views

Curl_ntlm_core_mk_nt_hash overflow on 32-bit systems risks small buffers and possible code execution.

Reporter	Title	Published	Views	Family All 148
IBM Security Bulletins	Security Bulletin: IBM API Connect has addressed multiple vulnerabilities in Developer Portal's dependencies - Cumulative list from June 28, 2018 to December 13, 2018	28 Jan 201917:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by vulnerabilities in cURL (CVE-2018-14618 CVE-2018-16840 CVE-2018-16842)	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities have been addressed in IBM Security Access Manager Appliance	30 Sep 201921:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerability in cURL (CVE-2018-14618)	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities affect IBM® Cloud Private - fluentd	12 Feb 201918:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in libCurl affects IBM Watson Studio Local	20 Dec 201913:58	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Cloud Private Storage - GlusterFS and Minio	12 Mar 201914:40	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Cloud Private Monitoring	7 Mar 201920:10	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in curl affects IBM Cloud Pak System (CVE-2018-14618)	6 May 202012:02	–	ibm
IBM Security Bulletins	Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801r	26 Oct 201821:10	–	ibm

Vulners

Node

daniel_stenberg curlRange<7.61.1

Source	Link
curl	www.curl.haxx.se/docs/CVE-2018-14618.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-14618
security-tracker	www.security-tracker.debian.org/tracker/CVE-2018-14618
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-436177.pdf
wiki	www.wiki.astralinux.ru/pages/viewpage.action
web	www.web.nvd.nist.gov/view/vuln/detail

23 Mar 2021 00:00Current

7.7High risk

Vulners AI Score7.7

CVSS 39.8

CVSS 210

EPSS0.11115

curl ntlm hash buffer overflow integer overflow long passwords