CVE-2016-8617

🗓️ 31 Jul 2018 22:00:00Reported by redhatType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 155 Views

Curl base64 encode function buffer under-allocation vulnerabilit

Reporter	Title	Published	Views	Family All 131
IBM Security Bulletins	Security Bulletin: Vulnerabilities in cURL affect IBM Flex System Chassis Management Module (CMM)	31 Jan 201902:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in cURL affect IBM Integrated Management Module II (IMM2) for System x, Flex and BladeCenter Systems	14 Apr 202314:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in curl affect IBM Flex System Manager (FSM)	18 Jun 201801:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerabilities in curl	31 Jan 201902:25	–	ibm
FreeBSD	cURL -- multiple vulnerabilities	2 Nov 201600:00	–	freebsd
ALT Linux	Security fix for the ALT Linux 8 package curl version 7.51.0-alt1	2 Nov 201600:00	–	altlinux
Tenable Nessus	cURL/libcurl 7.x < 7.51.0 Multiple Vulnerabilities	9 Dec 201600:00	–	nessus
Tenable Nessus	Amazon Linux AMI : curl (ALAS-2016-766)	11 Nov 201600:00	–	nessus
Tenable Nessus	Debian DLA-711-1 : curl security update	18 Nov 201600:00	–	nessus
Tenable Nessus	Debian DSA-3705-1 : curl - security update	7 Nov 201600:00	–	nessus

NVD

Vulners

Node

haxx curlRange<7.51.0

[
  {
    "product": "curl",
    "vendor": "The Curl Project",
    "versions": [
      {
        "status": "affected",
        "version": "7.51.0"
      }
    ]
  }
]

Source	Link
curl	www.curl.haxx.se/CVE-2016-8617.patch
access	www.access.redhat.com/errata/RHSA-2018:2486
curl	www.curl.haxx.se/docs/adv_20161102C.html
securityfocus	www.securityfocus.com/bid/94097
lists	www.lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
securitytracker	www.securitytracker.com/id/1037192
security	www.security.gentoo.org/glsa/201701-47
oracle	www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
lists	www.lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E

21 Nov 2024 02:59Current

7.8High risk

Vulners AI Score7.8

CVSS 24.4

CVSS 33.3 - 7

EPSS0.00085

SSVC

CWE-787