Lucene search

K
cvelistDebianCVELIST:CVE-2017-8816
HistoryNov 29, 2017 - 6:00 p.m.

CVE-2017-8816

2017-11-2918:00:00
debian
www.cve.org

7.9 High

AI Score

Confidence

Low

0.037 Low

EPSS

Percentile

91.8%

The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denial of service (integer overflow and resultant buffer overflow, and application crash) or possibly have unspecified other impact via vectors involving long user and password fields.

CNA Affected

[
  {
    "product": "curl and libcurl before 7.57.0",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "curl and libcurl before 7.57.0"
      }
    ]
  }
]