CURL-CVE-2018-16839 SASL password overflow via integer overflow

🗓️ 31 Oct 2018 08:00:00Reported by GoogleType

osv🔗 osv.dev👁 7 Views

Buffer overflow vulnerability in SASL authentication in libcurl due to integer overflow issue.

Reporter	Title	Published	Views	Family All 105
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in Red Hat® Enterprise Linux (RHEL) Server shipped with PurePower Integrated Manager (PPIM)	20 Dec 201908:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities affect IBM® Cloud Private - fluentd	12 Feb 201918:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in libCurl affects IBM Watson Studio Local	20 Dec 201913:58	–	ibm
IBM Security Bulletins	Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801-s, 1801-t and 1801-u	5 Dec 201822:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Event Streams is affected by cURL vulnerabilities	17 Dec 201816:15	–	ibm
Tenable Nessus	Amazon Linux 2 : curl (ALAS-2019-1162)	19 Feb 201900:00	–	nessus
Tenable Nessus	Amazon Linux AMI : curl (ALAS-2019-1148)	25 Jan 201900:00	–	nessus
Tenable Nessus	Debian DLA-1568-1 : curl security update	7 Nov 201800:00	–	nessus
Tenable Nessus	Debian DSA-4331-1 : curl - security update	5 Nov 201800:00	–	nessus
Tenable Nessus	Fedora 29 : curl (2018-7785911c9e)	3 Jan 201900:00	–	nessus

27 May 2026 02:29Current

8High risk

Vulners AI Score8

CVSS 27.5

CVSS 34.3 - 9.8

EPSS0.00346

SSVC