Fedora 28 : curl (2018-fa01002d7e)

fix FTP shutdown response buffer overflow CVE-2018-1000300 - fix RTSP bad headers buffer over-read CVE-2018-1000301 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and...

Fedora 28 : curl (2018-57779d51c1)

fix heap buffer overflow in SMTP send CVE-2018-0500 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 29 : curl (2018-69bac0f51c)

make the patch for CVE-2018-16842 apply properly CVE-2018-16842 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Hashicorp Consul - Remote Command Execution via Rexec (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Hashicorp Consul Remote Command Execution via Rexec", 'Description' = %q This module exploits a feature of Hashicorp Consul named rexec. ,...

SUSE SLED15 / SLES15 Security Update : curl (SUSE-SU-2018:2423-1)

This update for curl fixes the following issues: Security issue fixed : - CVE-2018-0500: Fix a SMTP send heap buffer overflow bsc1099793. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatical...

SUSE SLED15 / SLES15 Security Update : curl (SUSE-SU-2018:2714-1)

This update for curl fixes the following issues : This security issue was fixed : CVE-2018-14618: Prevent integer overflow in the NTLM authentication code bsc1106019 The update package also includes non-security fixes. See advisory for details. Note that Tenable Network Security has extracted the...

SUSE SLED15 / SLES15 Security Update : curl (SUSE-SU-2018:3624-1)

This update for curl fixes the following issues : CVE-2018-16839: A SASL password overflow via integer overflow was fixed which could lead to crashes bsc1112758 CVE-2018-16840: A use-after-free in SASL handle close was fixed which could lead to crashes bsc1112758 CVE-2018-16842: A Out-of-bounds...

EulerOS 2.0 SP2 : curl (EulerOS-SA-2018-1427)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was found that curl and libcurl might send their Authentication header to a third party HTTP server upon receiving an HTTP REDIRECT reply. This...

CVE-2018-20483

setfilemetadata in xattr.c in GNU Wget before 1.20.1 stores a file's origin URL in the user.xdg.origin.url metadata attribute of the extended attributes of the downloaded file, which allows local users to obtain sensitive information e.g., credentials contained in the URL by reading this attribut...

The vulnerability of the Curlauth_create_plain_message function in the software’s interaction with servers via cURL allows a hacker to cause a service failure.

The vulnerability of the Curlauthcreateplainmessage function in the software’s interaction with servers via cURL is due to an overflow in the “buffer”. Exploiting this vulnerability can allow a malicious actor to cause service failures...

curl/curl_fuzzer_ftp: Crash in ftp_disconnect

Project: https://github.com/curl/curl.git Detailed report: https://oss-fuzz.com/testcase?key=5176327364149248 Project: curl Fuzzer: libFuzzercurlfuzzerftp Fuzz target binary: curlfuzzerftp Job Type: libfuzzerasancurl Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000000015b0 Crash...

Amazon Linux 2 : curl (ALAS-2018-1135)

curl is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Curlntlmcoremknthash multiplies the length of the password by two SUM to figure out how large temporary storage area to allocate from the heap. The length value is then subsequently used to iterate over...

Security Bulletin: IBM Event Streams is affected by cURL vulnerabilities

Summary IBM Event Streams is affected by the following vulnerabilities in the included cURL application. Vulnerability Details CVEID: CVE-2018-16840 DESCRIPTION: cURL is vulnerable to a denial of service, caused by a heap use-after-free flaw in the Curlclose function. By sending a specially-craft...

Security Bulletin: Vulnerabilities in curl affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in curl. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2018-1000301 DESCRIPTION: curl is vulnerable to a denial of service, caused by heap-based buffer over-read. By sending a specially crafted RTSP response, a remote...

Fortify SSC 17.10 / 17.20 / 18.10 Project Insecure Direct Object Reference

Details ================ Software: Fortify SSC Software Security Center Version: 17.10, 17.20 & 18.10 Homepage: https://www.microfocus.com Advisory report: https://github.com/alt3kx/CVE-2018-7690 CVE: CVE-2018-7690 CVSS: 6.5 Medium; AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CWE-639 Description...

Fortify SSC 17.10 / 17.20 / 18.10 User Detail Insecure Direct Object Reference

Details ================ Software: Fortify SSC Software Security Center Version: 17.10, 17.20 & 18.10 Homepage: https://www.microfocus.com Advisory report: https://github.com/alt3kx/CVE-2018-7691 CVE: CVE-2018-7691 CVSS: 6.5 Medium; AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CWE-639 Description...

PrestaShop 1.6.x / 1.7.x Remote Code Execution

?php / PrestaShop 1.6.x = 1.6.1.23 & 1.7.x = 1.7.4.4 - Back Office Remote Code Execution See https://github.com/farisv/PrestaShop-CVE-2018-19126 for explanation. Chaining multiple vulnerabilities to trigger deserialization via phar. Date: December 1st, 2018 Author: farisv Vendor Homepage:...

EulerOS 2.0 SP3 : curl (EulerOS-SA-2018-1401)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was found that curl and libcurl might send their Authentication header to a third party HTTP server upon receiving an HTTP REDIRECT reply. This...

The vulnerability of the software for interacting with servers via curl lies in the fact that an operation may be performed outside the buffer boundaries in memory, allowing a malicious actor to trigger a service failure.

The vulnerability of the software for interacting with servers using curl is related to the possibility of the operation exceeding the buffer limits in dynamic memory during the execution of grammar analysis of incorrect RTSP responses. Exploiting this vulnerability allows a malicious actor to...

Amazon Linux AMI : curl (ALAS-2018-1112)

curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Curlntlmcoremknthash multiplies the length of the password by two SUM to figure out how large temporary storage area to allocate from the heap. The length value is then subsequently...