UBUNTU-CVE-2016-8622

The URL percent-encoding decode function in libcurl before 7.51.0 is called curleasyunescape. Internally, even if this function would be made to allocate a unscape destination buffer larger than 2GB, it would return that new length in a signed 32 bit integer variable, thus the length would get...

PT-2016-7528

Name of the Vulnerable Software and Affected Versions libcurl versions prior to 7.51.0 Description The issue concerns the URL percent-encoding decode function in libcurl, internally known as curl easy unescape. This function can lead to libcurl writing outside of its heap-based buffer if it...

PT-2016-7247

Name of the Vulnerable Software and Affected Versions libcurl versions prior to 7.50.3 Description The issue is caused by multiple integer overflows in the curl escape, curl easy escape, curl unescape, and curl easy unescape functions. These functions perform string URL percent escaping and...

PT-2013-1238

Name of the Vulnerable Software and Affected Versions cURL versions 7.7 through 7.30.0 libcurl versions prior to 7.34.0 Description The issue is related to a heap-based buffer overflow in the curl easy unescape function, which can be exploited by remote attackers to cause a denial of service or...