SASL password overflow via integer overflow

🗓️ 31 Oct 2018 08:00:00Reported by curlType

curl🔗 curl.se👁 2 Views

SASL plain message buffer overflow caused by integer overflow on thirty two bit systems.

Reporter	Title	Published	Views	Family All 107
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in Red Hat® Enterprise Linux (RHEL) Server shipped with PurePower Integrated Manager (PPIM)	20 Dec 201908:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities affect IBM® Cloud Private - fluentd	12 Feb 201918:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in libCurl affects IBM Watson Studio Local	20 Dec 201913:58	–	ibm
IBM Security Bulletins	Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801-s, 1801-t and 1801-u	5 Dec 201822:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Event Streams is affected by cURL vulnerabilities	17 Dec 201816:15	–	ibm
Tenable Nessus	Amazon Linux 2 : curl (ALAS-2019-1162)	19 Feb 201900:00	–	nessus
Tenable Nessus	Amazon Linux AMI : curl (ALAS-2019-1148)	25 Jan 201900:00	–	nessus
Tenable Nessus	Debian DLA-1568-1 : curl security update	7 Nov 201800:00	–	nessus
Tenable Nessus	Debian DSA-4331-1 : curl - security update	5 Nov 201800:00	–	nessus
Tenable Nessus	Fedora 29 : curl (2018-7785911c9e)	3 Jan 201900:00	–	nessus

Vulners

Node

haxx curlRange7.33.0–7.62.0

haxx libcurlRange7.33.0–7.62.0

25 Apr 2026 17:48Current

7.2High risk

Vulners AI Score7.2

CVSS 27.5

CVSS 34.3 - 9.8

EPSS0.00346

SSVC