CVE-2016-8617

🗓️ 02 Nov 2016 08:47:26Reported by redhat.comType

The curl base64 encode function in version 7.51.0 and prior is vulnerable to buffer under-allocation in 32-bit systems when input via CURLOPT_USERNAME exceeds 1GB

Reporter	Title	Published	Views	Family All 131
IBM Security Bulletins	Security Bulletin: Vulnerabilities in cURL affect IBM Flex System Chassis Management Module (CMM)	31 Jan 201902:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in cURL affect IBM Integrated Management Module II (IMM2) for System x, Flex and BladeCenter Systems	14 Apr 202314:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in curl affect IBM Flex System Manager (FSM)	18 Jun 201801:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerabilities in curl	31 Jan 201902:25	–	ibm
FreeBSD	cURL -- multiple vulnerabilities	2 Nov 201600:00	–	freebsd
ALT Linux	Security fix for the ALT Linux 8 package curl version 7.51.0-alt1	2 Nov 201600:00	–	altlinux
Tenable Nessus	cURL/libcurl 7.x < 7.51.0 Multiple Vulnerabilities	9 Dec 201600:00	–	nessus
Tenable Nessus	Amazon Linux AMI : curl (ALAS-2016-766)	11 Nov 201600:00	–	nessus
Tenable Nessus	Debian DLA-711-1 : curl security update	18 Nov 201600:00	–	nessus
Tenable Nessus	Debian DSA-3705-1 : curl - security update	7 Nov 201600:00	–	nessus