SMB send off unrelated memory contents

🗓️ 17 Jun 2015 08:00:00Reported by curlType

curl🔗 curl.se👁 2 Views

A crafted SMB response can trick libcurl into sending unintended data or crashing due to missing boundary checks.

Reporter	Title	Published	Views	Family All 47
IBM Security Bulletins	Security Bulletin: A vulnerability in libcURL affects IBM Tivoli Netcool System Service Monitors/Application Service Monitors (CVE-2015-3237)	17 Jun 201815:21	–	ibm
ALT Linux	Security fix for the ALT Linux 8 package curl version 7.43.0-alt1	19 Jun 201500:00	–	altlinux
Amazon	Medium: curl	18 Jun 201500:00	–	amazon
Tenable Nessus	Amazon Linux AMI : curl (ALAS-2015-551)	22 Jun 201500:00	–	nessus
Tenable Nessus	Fedora 22 : curl-7.40.0-5.fc22 (2015-10155)	25 Jun 201500:00	–	nessus
Tenable Nessus	FreeBSD : cURL -- Multiple Vulnerability (2438d4af-1538-11e5-a106-3c970e169bc2)	18 Jun 201500:00	–	nessus
Tenable Nessus	GLSA-201509-02 : cURL: Multiple vulnerabilities	25 Sep 201500:00	–	nessus
Tenable Nessus	Oracle GlassFish Server 3.1.2.x < 3.1.2.15 Multiple Vulnerabilities (July 2016 CPU)	20 Jul 201600:00	–	nessus
Tenable Nessus	Oracle GlassFish Server 3.0.1.x < 3.0.1.14 Multiple Vulnerabilities (July 2016 CPU)	20 Jul 201600:00	–	nessus
Tenable Nessus	HP System Management Homepage Multiple Vulnerabilities (HPSBMU03593)	18 May 201600:00	–	nessus