PT-2018-1976

🗓️ 28 Sep 2018 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbu.gs👁 1 Views

Heap buffer overrun in Curl SASL auth code's create plain message function causes DoS.

Reporter	Title	Published	Views	Family All 331
IBM Security Bulletins	Security Bulletin: The Community Edition of IBM ILOG CPLEX Optimization Studio is affected by a vulnerability in libcurl (CVE-2021-22945)	4 Oct 202115:52	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Curl affect PowerSC	1 Nov 202120:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar WinCollect is vulnerable to using components with known vulnerabilities	17 Jun 202218:45	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in Red Hat® Enterprise Linux (RHEL) Server shipped with PurePower Integrated Manager (PPIM)	20 Dec 201908:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities affect IBM® Cloud Private - fluentd	12 Feb 201918:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in libCurl affects IBM Watson Studio Local	20 Dec 201913:58	–	ibm
IBM Security Bulletins	Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801-s, 1801-t and 1801-u	5 Dec 201822:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Event Streams is affected by cURL vulnerabilities	17 Dec 201816:15	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in libcurl affect IBM Spectrum Protect Plus SQL, File Indexing, and Windows Host agents	19 Sep 202222:54	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Cloud Private - curl (CVE-2021-22945)	22 Apr 202220:08	–	ibm

Source	Link
suse	www.suse.com/security/cve/CVE-2019-15601
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-1000122
ubuntu	www.ubuntu.com/security/notices/USN-3805-1
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-1000121
osv	www.osv.dev/vulnerability/CVE-2016-5421
suse	www.suse.com/security/cve/CVE-2016-9594
osv	www.osv.dev/vulnerability/CLEANSTART-2026-LQ42192
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-27538
osv	www.osv.dev/vulnerability/CLEANSTART-2026-DI23929
osv	www.osv.dev/vulnerability/CVE-2018-14618

18 Sep 2026 00:00Current

CVSS 3.19.1 - 9.8

CVSS 27.5

CVSS 34.3 - 9.8

EPSS0.06677

SSVC

Curl SASL authentication buffer overrun heap denial of service create plain message