Integer overflow

🗓️ 05 Sep 2018 19:29:00Reported by PRIOn knowledge baseType

prion

prion🔗 www.prio-n.com👁 28 Views

Curl before version 7.61.1 vulnerable to NTLM authentication buffer overrun due to integer overflo

Reporter	Title	Published	Views	Family All 228
IBM Security Bulletins	Security Bulletin: IBM API Connect has addressed multiple vulnerabilities in Developer Portal's dependencies - Cumulative list from June 28, 2018 to December 13, 2018	28 Jan 201917:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by vulnerabilities in cURL (CVE-2018-14618 CVE-2018-16840 CVE-2018-16842)	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities have been addressed in IBM Security Access Manager Appliance	30 Sep 201921:15	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in cURL/libcurl affect Intel® Manycore Platform Software Stack (Intel® MPSS) for Linux and Windows	31 Jan 201902:40	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in cURL affect IBM Flex System FC3171 8Gb SAN Switch and SAN Pass-thru (CVE-2017-8816 CVE-2017-8817 CVE-2017-8818)	31 Jan 201902:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerability in cURL (CVE-2018-14618)	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities affect IBM® Cloud Private - fluentd	12 Feb 201918:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in libCurl affects IBM Watson Studio Local	20 Dec 201913:58	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Cloud Private Storage - GlusterFS and Minio	12 Mar 201914:40	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in cURL affect QLogic Virtual Fabric Extension Module for IBM BladeCenter	10 Apr 202321:40	–	ibm

Source	Link
curl	www.curl.haxx.se/docs/CVE-2018-14618.html
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
debian	www.debian.org/security/2018/dsa-4286
securitytracker	www.securitytracker.com/id/1041605
usn	www.usn.ubuntu.com/3765-1/
usn	www.usn.ubuntu.com/3765-2/
psirt	www.psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0014
access	www.access.redhat.com/errata/RHSA-2018:3558
security	www.security.gentoo.org/glsa/201903-03
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-436177.pdf

22 Apr 2019 17:48Current

9.7High risk

Vulners AI Score9.7

EPSS0.00493

curl version 7.61.1 buffer overrun ntlm authentication integer overflow heap buffer overflow cve-2017-8816