Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

curl: --write-out out of bounds read

šŸ—“ļøĀ 13 Nov 2018Ā 08:36:35Reported byĀ RedHatTypeĀ 
redhat
Ā redhatšŸ”—Ā access.redhat.comšŸ‘Ā 10Ā Views

Curl 7.53.1 write-out disclosure on Unix via trailing % in --write-out causing heap over-read.

Related
Packages
Refs
ReporterTitlePublishedViews
Family
freebsd
FreeBSD		cURL -- potential memory disclosure
3 Apr 201700:00
ā€“freebsd
ibm
IBM Security Bulletins		Security Bulletin: Vulnerabilities in cURL/libcurl affect IntelĀ® Manycore Platform Software Stack (IntelĀ® MPSS) for Linux and Windows
31 Jan 201902:40
ā€“ibm
ibm
IBM Security Bulletins		Security Bulletin: Vulnerability in curl affects IBM Chassis Management Module (CVE-2017-7407)
31 Jan 201902:25
ā€“ibm
ibm
IBM Security Bulletins		Security Bulletin: Vulnerabilities in curl affect IBM Integrated Management Module II (IMM2) for System x, Flex and BladeCenter Systems
14 Apr 202314:32
ā€“ibm
ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities in curl affect IBM Flex System Manager (FSM) (CVE-2016-9586, CVE-2017-7407 )
18 Jun 201801:38
ā€“ibm
ibm
IBM Security Bulletins		Security Bulletin: Vulnerabilities in curl affect IBM BladeCenter Advanced Management Module (AMM) (CVE-2016-9586, CVE-2017-7407)
14 Apr 202314:32
ā€“ibm
amazon
Amazon		Low: curl
22 Jun 201700:00
ā€“amazon
nessus
Tenable Nessus		Amazon Linux AMI : curl (ALAS-2017-850)
23 Jun 201700:00
ā€“nessus
nessus
Tenable Nessus		Debian DLA-883-1 : curl security update
5 Apr 201700:00
ā€“nessus
nessus
Tenable Nessus		EulerOS Virtualization 2.5.3 : curl (EulerOS-SA-2019-1172)
9 Apr 201900:00
ā€“nessus
Rows per page
OSOS VersionArchitecturePackagePackage VersionFilename
Red Hat Enterprise Linux6x86_64httpd24-curl7.61.1-1.el6httpd24-curl-7.61.1-1.el6.x86_64.rpm
Red Hat Enterprise Linux7aarch64httpd24-curl7.61.1-1.el7httpd24-curl-7.61.1-1.el7.aarch64.rpm
Red Hat Enterprise Linux7ppc64lehttpd24-curl7.61.1-1.el7httpd24-curl-7.61.1-1.el7.ppc64le.rpm
Red Hat Enterprise Linux7s390xhttpd24-curl7.61.1-1.el7httpd24-curl-7.61.1-1.el7.s390x.rpm
Red Hat Enterprise Linux7x86_64httpd24-curl7.61.1-1.el7httpd24-curl-7.61.1-1.el7.x86_64.rpm
Red Hat Enterprise Linux6x86_64httpd24-curl-debuginfo7.61.1-1.el6httpd24-curl-debuginfo-7.61.1-1.el6.x86_64.rpm
Red Hat Enterprise Linux7aarch64httpd24-curl-debuginfo7.61.1-1.el7httpd24-curl-debuginfo-7.61.1-1.el7.aarch64.rpm
Red Hat Enterprise Linux7ppc64lehttpd24-curl-debuginfo7.61.1-1.el7httpd24-curl-debuginfo-7.61.1-1.el7.ppc64le.rpm
Red Hat Enterprise Linux7s390xhttpd24-curl-debuginfo7.61.1-1.el7httpd24-curl-debuginfo-7.61.1-1.el7.s390x.rpm
Red Hat Enterprise Linux7x86_64httpd24-curl-debuginfo7.61.1-1.el7httpd24-curl-debuginfo-7.61.1-1.el7.x86_64.rpm
Rows per page

Data

Build on a solid foundation withĀ Vulners data

WeĀ provide theĀ essential building blocks forĀ cybersecurity solutions withĀ comprehensive, structured, andĀ constantly updated vulnerability andĀ exploits data

Api

Power your application withĀ Vulners API

The Vulners REST API offers reliable, high-performance access toĀ vulnerabilityĀ intelligence, withĀ 99.9%Ā SLAĀ uptime andĀ CDN-backed data delivery forĀ seamlessĀ global access

App

Assess and manage vulnerabilities withĀ VulnersĀ tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
04 Aug 2026 21:58Current
7.4High risk
Vulners AI Score7.4
CVSS 22.1
CVSS 32.4
CVSS 3.12.4
EPSS0.00581
SSVC
CWE-125
curl vulnerabilitywrite out optionmemory disclosureheap over readunix
10