Security update for curl (moderate)

This update for curl fixes the following issues: This security issue was fixed: - CVE-2018-14618: Prevent integer overflow in the NTLM authentication code bsc1106019 This non-security issue was fixed: - Use OPENSSLconfig instead of CONFmodulesloadfile to avoid crashes due to openssl engines...

SUSE-SU-2018:2714-1 Security update for curl

This update for curl fixes the following issues: This security issue was fixed: - CVE-2018-14618: Prevent integer overflow in the NTLM authentication code bsc1106019 This non-security issue was fixed: - Use OPENSSLconfig instead of CONFmodulesloadfile to avoid crashes due to openssl engines...

SUSE-SU-2018:2715-1 Security update for curl

This update for curl fixes the following issues: This security issue was fixed: - CVE-2018-14618: Prevent integer overflow in the NTLM authentication code bsc1106019 This non-security issue was fixed: - Fixed erroneous debug message when paired with OpenSSL bsc1089533...

SUSE-SU-2018:2717-1 Security update for curl

This update for curl fixes the following issues: - CVE-2018-14618: Prevent integer overflow in the NTLM authentication code bsc1106019...

Security Bulletin: Vulnerabilities in cURL/libcURL affect IBM Flex System FC3171 8Gb SAN Switch & SAN Pass-thru

Summary The following vulnerabilities in cURL/libcURL have been addressed by IBM Flex System FC3171 8Gb SAN Switch & SAN Pass-thru. Vulnerability Details CVEID: CVE-2018-1000007 DESCRIPTION: cURL libcurl could allow a remote attacker to obtain sensitive information, caused by a flaw when passing ...

Fedora Update for curl FEDORA-2018-111044d435

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-1498-1 : curl security update

It was discovered that there was a an integer overflow vulnerability in curl, a command line tool for transferring data over HTTP, etc. For more information, please see : For Debian 8 'Jessie', this issue has been fixed in curl version 7.38.0-4+deb8u12. We recommend that you upgrade your curl...

Debian: Security Advisory (DLA-1498-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security fix for the ALT Linux 8 package curl version 7.61.1-alt1

Sept. 9, 2018 Anton Farygin 7.61.1-alt1 - 7.61.1 fixes: CVE-2018-14618...

[SECURITY] [DLA 1498-1] curl security update

Package : curl Version : 7.38.0-4+deb8u12 CVE IDs : CVE-2018-14618 CVE-2018-14618 It was discovered that there was a an integer overflow vulnerability in curl, a command line tool for transferring data over HTTP, etc. For more information, please see: https://curl.haxx.se/docs/CVE-2018-14618.html...

DLA-1498-1 curl - security update

Bulletin has no description...

cURL (libcurl) NTLM Authentication Code Buffer Overrun Vulnerability

curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Curlntlmcoremknthash multiplies the length of the password by two SUM to figure out how large temporary storage area to allocate from the heap. The length value is then subsequently...

Slackware 14.0 / 14.1 / 14.2 / current : curl (SSA:2018-249-01)

New curl packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2018-249-01. The text itself is copyright C Slackware Linux,...

FreeBSD : curl -- password overflow vulnerability (f4d638b9-e6e5-4dbe-8c70-571dbc116174)

curl security problems : CVE-2018-14618: NTLM password overflow via integer overflow The internal function Curlntlmcoremknthash multiplies the length of the password by two SUM to figure out how large temporary storage area to allocate from the heap. The length value is then subsequently used to...

Debian DSA-4286-1 : curl - security update

Zhaoyang Wu discovered that cURL, an URL transfer library, contains a buffer overflow in the NTLM authentication code triggered by passwords that exceed 2GB in length on 32bit systems. See https://curl.haxx.se/docs/CVE-2018-14618.html for more information. C Tenable Network Security, Inc. The...

[SECURITY] [DSA 4286-1] curl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4286-1 [email protected] https://www.debian.org/security/ Alessandro Ghedini September 05, 2018 https://www.debian.org/security/faq -...

DEBIAN-CVE-2018-14618

curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Curlntlmcoremknthash multiplies the length of the password by two SUM to figure out how large temporary storage area to allocate from the heap. The length value is then subsequently...

ALPINE-CVE-2018-14618

curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Curlntlmcoremknthash multiplies the length of the password by two SUM to figure out how large temporary storage area to allocate from the heap. The length value is then subsequently...

Integer overflow

curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Curlntlmcoremknthash multiplies the length of the password by two SUM to figure out how large temporary storage area to allocate from the heap. The length value is then subsequently...

CVE-2018-14618

curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Curlntlmcoremknthash multiplies the length of the password by two SUM to figure out how large temporary storage area to allocate from the heap. The length value is then subsequently...