Haxx curl heap buffer overflow vulnerability

🗓️ 16 Mar 2018 00:00:00Reported by China National Vulnerability DatabaseType

Curl RTSP RTP heap overflow affects 7.20.0 to 7.58.0, enabling denial of service and information disclosure.

Reporter	Title	Published	Views	Family All 145
IBM Security Bulletins	Security Bulletin: Vulnerabilities in curl affect PowerKVM	17 Dec 201814:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerabilities in cURL, DHCP and GNU C Library	7 Dec 202322:31	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities affect IBM® Cloud Private (CVE-2018-0739,CVE-2017-17512, CVE-2018-1000122)	1 Oct 201814:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by vulnerabilities in curl	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security vulnerabilities have been fixed in the IBM Security Access Manager Appliance	30 May 201921:45	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in cURL affect IBM BladeCenter Advanced Management Module (AMM)	3 Oct 201821:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities affect IBM® Cloud Private	20 Jul 201818:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integrated Management Module II (IMM2) is affected by vulnerabilities in curl	7 Dec 202322:45	–	ibm
ALT Linux	Security fix for the ALT Linux 8 package curl version 7.59.0-alt1	31 Mar 201800:00	–	altlinux
Tenable Nessus	Amazon Linux 2 : curl (ALAS-2018-995)	20 Apr 201800:00	–	nessus

Vulners

Node

haxx curlRange7.20.0–7.58.0

Source	Link
curl	www.curl.haxx.se/docs/adv_2018-b047.html

04 Apr 2018 00:00Current

9.4High risk

Vulners AI Score9.4

CVSS 26.4

CVSS 39.1

EPSS0.09393