CVE-2018-14618

🗓️ 05 Sep 2018 19:00:00Reported by redhatType

curl before version 7.61.1 NTLM auth buffer overru

Reporter	Title	Published	Views	Family All 146
IBM Security Bulletins	Security Bulletin: IBM API Connect has addressed multiple vulnerabilities in Developer Portal's dependencies - Cumulative list from June 28, 2018 to December 13, 2018	28 Jan 201917:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by vulnerabilities in cURL (CVE-2018-14618 CVE-2018-16840 CVE-2018-16842)	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities have been addressed in IBM Security Access Manager Appliance	30 Sep 201921:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerability in cURL (CVE-2018-14618)	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities affect IBM® Cloud Private - fluentd	12 Feb 201918:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in libCurl affects IBM Watson Studio Local	20 Dec 201913:58	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Cloud Private Storage - GlusterFS and Minio	12 Mar 201914:40	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Cloud Private Monitoring	7 Mar 201920:10	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in curl affects IBM Cloud Pak System (CVE-2018-14618)	6 May 202012:02	–	ibm
IBM Security Bulletins	Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801r	26 Oct 201821:10	–	ibm

NVD

Vulners

Node

haxx libcurlRange<7.61.1

Node

canonical ubuntu_linuxMatch12.04esm

canonical ubuntu_linuxMatch14.04lts

canonical ubuntu_linuxMatch16.04lts

canonical ubuntu_linuxMatch18.04lts

Node

debian debian_linuxMatch9.0

Node

redhat enterprise_linuxMatch6.0

redhat enterprise_linuxMatch7.0

redhat enterprise_linuxMatch7.4

redhat enterprise_linuxMatch7.5

redhat enterprise_linuxMatch7.6

[
  {
    "product": "curl",
    "vendor": "[UNKNOWN]",
    "versions": [
      {
        "status": "affected",
        "version": "7.61.1"
      }
    ]
  }
]

Source	Link
curl	www.curl.haxx.se/docs/CVE-2018-14618.html
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-436177.pdf
access	www.access.redhat.com/errata/RHSA-2019:1880
debian	www.debian.org/security/2018/dsa-4286
security	www.security.gentoo.org/glsa/201903-03
usn	www.usn.ubuntu.com/3765-1/
securitytracker	www.securitytracker.com/id/1041605
usn	www.usn.ubuntu.com/3765-2/
access	www.access.redhat.com/errata/RHSA-2018:3558

21 Nov 2024 03:49Current

9.9High risk

Vulners AI Score9.9

CVSS 37.5 - 9.8

CVSS 210

EPSS0.00493

SSVC

cve-2018-14618 curl buffer overrun ntlm authentication security vulnerability