K31411450 : cURL and libcurl vulnerability CVE-2016-8620

Security Advisory Description

The ‘globbing’ feature in curl before version 7.51.0 has a flaw that leads to integer overflow and out-of-bounds read via user controlled input. (CVE-2016-8620)

Impact

An attacker can cause a denial-of-service (DoS) by exploiting a flaw in the cURL tool’s glob parser to trigger out-of-bounds memory access.