CURL-CVE-2018-1000120 FTP path trickery leads to NIL byte out of bounds write

🗓️ 14 Mar 2018 08:00:00Reported by GoogleType

osv

osv🔗 osv.dev👁 5 Views

CURL vulnerability allows attackers to exploit FTP paths, leading to out of bounds writes.

Reporter	Title	Published	Views	Family All 150
IBM Security Bulletins	Security Bulletin: Vulnerabilities in curl affect PowerKVM	17 Dec 201814:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerabilities in cURL, DHCP and GNU C Library	7 Dec 202322:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by vulnerabilities in curl	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in cURL affect IBM BladeCenter Advanced Management Module (AMM)	3 Oct 201821:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integrated Management Module II (IMM2) is affected by vulnerabilities in curl	7 Dec 202322:45	–	ibm
ALT Linux	Security fix for the ALT Linux 8 package curl version 7.59.0-alt1	31 Mar 201800:00	–	altlinux
Tenable Nessus	Amazon Linux 2 : curl (ALAS-2018-995)	20 Apr 201800:00	–	nessus
Tenable Nessus	Amazon Linux 2 : nss-pem (ALAS-2019-1139)	10 Jan 201900:00	–	nessus
Tenable Nessus	Amazon Linux AMI : curl (ALAS-2018-995)	20 Apr 201800:00	–	nessus
Tenable Nessus	CentOS 7 : curl / nss-pem (CESA-2018:3157)	16 Nov 201800:00	–	nessus

27 May 2026 02:29Current

9.1High risk

Vulners AI Score9.1

CVSS 27.5

CVSS 39.8

EPSS0.01298

curl vulnerability ftp path trickery nil byte overwrite out of bounds write zero byte exploit buffer overflow memory overwrite