CVE-2016-9586

🗓️ 23 Apr 2018 18:29:00Reported by [email protected]Type

The curl before version 7.52.0 is vulnerable to a buffer overflow in libcurl's printf() function

Reporter	Title	Published	Views	Family All 113
ALT Linux	Security fix for the ALT Linux 8 package curl version 7.52.0-alt1	21 Dec 201600:00	–	altlinux
IBM Security Bulletins	Security Bulletin: Vulnerabilities in cURL/libcurl affect Intel® Manycore Platform Software Stack (Intel® MPSS) for Linux and Windows	31 Jan 201902:40	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in curl affect IBM Integrated Management Module II (IMM2) for System x, Flex and BladeCenter Systems	14 Apr 202314:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in curl affect IBM Flex System Manager (FSM) (CVE-2016-9586, CVE-2017-7407 )	18 Jun 201801:38	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in curl affect IBM BladeCenter Advanced Management Module (AMM) (CVE-2016-9586, CVE-2017-7407)	14 Apr 202314:32	–	ibm
FreeBSD	cURL -- buffer overflow	21 Dec 201600:00	–	freebsd
Tenable Nessus	Mac OS X 10.x < 10.12.6 Multiple Vulnerabilities	27 Jul 201700:00	–	nessus
Tenable Nessus	Amazon Linux AMI : curl (ALAS-2017-806)	23 Mar 201700:00	–	nessus
Tenable Nessus	Debian DLA-1568-1 : curl security update	7 Nov 201800:00	–	nessus
Tenable Nessus	Debian DLA-767-1 : curl security update	3 Jan 201700:00	–	nessus

NVD

Node

haxx curlRange<7.52.0

Source	Link
access	www.access.redhat.com/errata/RHSA-2018:3558
security	www.security.gentoo.org/glsa/201701-47
lists	www.lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E
lists	www.lists.debian.org/debian-lts-announce/2018/11/msg00005.html
securityfocus	www.securityfocus.com/bid/95019
lists	www.lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
oracle	www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
curl	www.curl.haxx.se/docs/adv_20161221A.html
securitytracker	www.securitytracker.com/id/1037515

21 Nov 2024 03:01Current

6.8Medium risk

Vulners AI Score6.8

CVSS 26.8

CVSS 35.9 - 8.1

EPSS0.01009