[SECURITY] [DLA 625-1] curl security update

Package : curl Version : 7.26.0-1+wheezy16 CVE ID : CVE-2016-7167 Debian Bug : 837945 It was discovered that the four four libcurl functions curlescape, curleasyescape, curlunescape and curleasyunescape accepted negative sting length inputs. For Debian 7 "Wheezy", these problems have been fixed i...

Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / 14.2 / current : curl (SSA:2016-259-01)

New curl packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2016-259-01. The tex...

Fedora Update for curl FEDORA-2016-7a2ed52d41

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-7167

Multiple integer overflow flaws leading to heap-based buffer overflows were found in the way curl handled escaping and unescaping of data. An attacker could potentially use these flaws to crash an application using libcurl by sending a specially crafted input to the affected libcurl functions...

Security fix for the ALT Linux 8 package curl version 7.50.3-alt1

Sept. 14, 2016 Anton Farygin 7.50.3-alt1 - new version with security fixes CVE-2016-7167...

CVE-2008-7167

CVE-2008-7167 describes an unrestricted file upload vulnerability in Page Manager 2006-02-04, where uploading a file with an executable extension to upload.php allows remote attackers to execute arbitrary code by directly requesting the uploaded file in an unspecified directory. The issue is caus...

CVE-2008-6935

creationtimestamp| type| source ---|---|--- 2008-11-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7145 2008-11-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7167...

CVE-2008-6937

creationtimestamp| type| source ---|---|--- 2008-11-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7145 2008-11-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7167...

CVE-2006-7167

Technical details of CVE-2006-7167 are not publicly available in the provided documents. Monitor for updates from vendors and security advisories; current sources reiterate an authentication bypass in ProRat Server 1.9 Fix2 without specifics.