curl: An integer overflow found in /lib/urlapi.c

🗓️ 24 Apr 2019 12:05:35Reported by 1wcType

hackerone

hackerone🔗 hackerone.com👁 55 Views

An integer overflow found in /lib/urlapi.c in libcurl leading to potential heap-based buffer overrun similar to CVE-2018-1461

Reporter	Title	Published	Views	Family All 215
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Curl affect PowerSC (CVE-2019-5435, CVE-2019-5436)	20 Dec 201908:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect has addressed multiple vulnerabilities in Developer Portal's dependencies - Cumulative list from June 28, 2018 to December 13, 2018	28 Jan 201917:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by vulnerabilities in cURL (CVE-2018-14618 CVE-2018-16840 CVE-2018-16842)	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities have been addressed in IBM Security Access Manager Appliance	30 Sep 201921:15	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerability has been identified in BigFix Platform shipped with IBM License Metric Tool.	12 Aug 202008:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerability in cURL (CVE-2018-14618)	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities affect IBM® Cloud Private - fluentd	12 Feb 201918:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in libCurl affects IBM Watson Studio Local	20 Dec 201913:58	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Cloud Private Storage - GlusterFS and Minio	12 Mar 201914:40	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Cloud Private Monitoring	7 Mar 201920:10	–	ibm

05 Dec 2020 08:36Current

7.8High risk

Vulners AI Score7.8

EPSS0.00493

libcurl integer overflow buffer overrun cve-2018-14618 heap-based crash