[ASA-201902-13] lib32-curl: arbitrary code execution

Arch Linux Security Advisory ASA-201902-13 ========================================== Severity: High Date : 2019-02-12 CVE-ID : CVE-2018-16890 CVE-2019-3822 CVE-2019-3823 Package : lib32-curl Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-874 Summary ======...

[SECURITY] [DLA 1672-1] curl security update

Package : curl Version : 7.38.0-4+deb8u14 CVE IDs : CVE-2018-16890 CVE-2019-3822 CVE-2019-3823 It was discovered that there were three vulnerabilities in the curl command-line HTTP etc. client: CVE-2018-16890: A heap buffer out-of-bounds read vulnerability in the handling of NTLM type-2 messages...

Debian: Security Advisory (DLA-1672-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AirDroid 4.2.1.6 - Denial of Service

AirDroid 4.2.1.6 - Denial of Service !/bin/bash Author: Marcelo Vázquez aka s4vitar AirDroid Denial of Service DoS & System Crash + Forced Reboot Exploit Title: AirDroid Remote Denial of Service DoS & System Crash + Forced Reboot Date: 2019-02-13 Exploit Author: Marcelo Vázquez aka s4vitar...

FreeBSD : curl -- multiple vulnerabilities (714b033a-2b09-11e9-8bc3-610fd6e6cd05)

curl security problems : CVE-2018-16890: NTLM type-2 out-of-bounds buffer read libcurl contains a heap buffer out-of-bounds read flaw. The function handling incoming NTLM type-2 messages lib/vauth/ntlm.c:ntlmdecodetype2target does not validate incoming data correctly and is subject to an integer...

Amazon Linux AMI : curl (ALAS-2019-1151)

setfilemetadata in xattr.c in GNU Wget stores a file's origin URL in the user.xdg.origin.url metadata attribute of the extended attributes of the downloaded file, which allows local users to obtain sensitive information e.g., credentials contained in the URL by reading this attribute, as...

Security fix for the ALT Linux 8 package curl version 7.64.0-alt1

7.64.0-alt1 built Feb. 8, 2019 Anton Farygin in task 220788 Feb. 6, 2019 Anton Farygin - 7.64.0 - fixes: CVE-2018-16890: NTLM type-2 out-of-bounds buffer read CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow CVE-2019-3823: SMTP end-of-response out-of-bounds read...

Debian DSA-4386-1 : curl - security update

Multiple vulnerabilities were discovered in cURL, an URL transfer library. - CVE-2018-16890 Wenxiang Qian of Tencent Blade Team discovered that the function handling incoming NTLM type-2 messages does not validate incoming data correctly and is subject to an integer overflow vulnerability, which...

Photon OS 2.0: Curl PHSA-2018-2.0-0009

An update of the curl package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0009. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121901;...

Slackware 14.0 / 14.1 / 14.2 / current : curl (SSA:2019-037-01)

New curl packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2019-037-01. The text itself is copyright C Slackware Linux,...

Photon OS 2.0: Curl PHSA-2018-2.0-0016

An update of the curl package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0016. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121916;...

Photon OS 1.0: Curl PHSA-2018-1.0-0124

An update of the curl package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-1.0-0124. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121819;...

Photon OS 1.0: Curl PHSA-2018-1.0-0186

An update of the curl package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-1.0-0186. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121889;...

Photon OS 1.0: Curl PHSA-2017-0044

An update of the curl package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0044. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121756;...

Photon OS 1.0: Curl PHSA-2018-1.0-0158

An update of the curl package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-1.0-0158. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121855;...

Photon OS 2.0: Curl PHSA-2018-2.0-0096

An update of the curl package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0096. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121995;...

Photon OS 1.0: Curl PHSA-2017-1.0-0095

An update of the curl package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-1.0-0095. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121784;...

Photon OS 1.0: Curl PHSA-2019-1.0-0203

An update of the curl package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0203. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid122015;...

SUSE SLED12 / SLES12 Security Update : curl (SUSE-SU-2019:0249-1)

This update for curl fixes the following issues : Security issues fixed : CVE-2019-3823: Fixed a heap out-of-bounds read in the code handling the end-of-response for SMTP bsc1123378. CVE-2019-3822: Fixed a stack-based buffer overflow in the function creating an outgoing NTLM type-3 message...

Photon OS 1.0: Curl PHSA-2018-1.0-0108

An update of the curl package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-1.0-0108. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121808;...