EUVD-2018-8638

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Curl versions 7.14.1 to 7.61.1 have a buffer over-read vulnerability causing information exposure.

Reporter	Title	Published	Views	Family All 147
IBM Security Bulletins	Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by vulnerabilities in cURL (CVE-2018-14618 CVE-2018-16840 CVE-2018-16842)	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerabilities in cURL (CVE-2018-16840 CVE-2018-16842)	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Advanced Cloud Pak is vulnerable to a buffer overflow in the curl command (CVE-2018-16842)	7 May 201917:15	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in Red Hat® Enterprise Linux (RHEL) Server shipped with PurePower Integrated Manager (PPIM)	20 Dec 201908:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities affect IBM® Cloud Private - fluentd	12 Feb 201918:05	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Curl used in OS image for RedHat Enterprise Linux for Cloud Pak System (CVE-2018-16842)	6 May 202012:02	–	ibm
IBM Security Bulletins	Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801-s, 1801-t and 1801-u	5 Dec 201822:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM BladeCenter Advanced Management Module (AMM) is affected by vulnerabilities in cURL (CVE-2018-16840 CVE-2018-16842)	11 Apr 201920:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Event Streams is affected by cURL vulnerabilities	17 Dec 201816:15	–	ibm
Tenable Nessus	Amazon Linux 2 : curl (ALAS-2019-1162)	19 Feb 201900:00	–	nessus

[
  {
    "enisaIdVendor": [
      {
        "id": "91b6b0f4-24c2-3541-bf71-43fcdb8b9a70",
        "vendor": {
          "name": "The Curl Project"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "351bde53-ce19-39a0-aae3-2e719f8db5f6",
        "product": {
          "name": "curl:"
        },
        "product_version": "from 7.14.1 to 7.61.1"
      }
    ]
  }
]

Source	Link
suse	www.suse.com/security/cve/CVE-2018-16842.html
debian	www.debian.org/security/2018/dsa-4331
access	www.access.redhat.com/errata/RHBA-2020:0547
access	www.access.redhat.com/errata/RHSA-2019:2181
access	www.access.redhat.com/errata/RHSA-2019:1543
ubuntu	www.ubuntu.com/security/CVE-2018-16842
security	www.security.archlinux.org/CVE-2018-16842
alas	www.alas.aws.amazon.com/cve/html/CVE-2018-16842.html
linux	www.linux.oracle.com/cve/CVE-2018-16842.html
security	www.security.gentoo.org/glsa/201903-03

07 Oct 2025 00:30Current

7High risk

Vulners AI Score7

CVSS 34.4 - 9.1

CVSS 26.4

EPSS0.00162

curl vulnerability heap over-read information exposure denial of service