USN-3765-1 curl vulnerability

It was discovered that curl incorrectly handled certain inputs. An attacker could possibly use this to execute arbitrary code...

openSUSE Security Update : curl (openSUSE-2018-1008)

This update for curl fixes the following issues : This security issue was fixed : - CVE-2018-14618: Prevent integer overflow in the NTLM authentication code bsc1106019 This non-security issue was fixed : - Fixed erroneous debug message when paired with OpenSSL bsc1089533 This update was imported...

SUSE SLES11 Security Update : curl (SUSE-SU-2018:2717-1)

This update for curl fixes the following issues : CVE-2018-14618: Prevent integer overflow in the NTLM authentication code bsc1106019. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...

openSUSE Security Update : curl (openSUSE-2018-1010)

This update for curl fixes the following issues : This security issue was fixed : - CVE-2018-14618: Prevent integer overflow in the NTLM authentication code bsc1106019 This non-security issue was fixed : - Use OPENSSLconfig instead of CONFmodulesloadfile to avoid crashes due to openssl engines...

SUSE SLED12 / SLES12 Security Update : curl (SUSE-SU-2018:2715-1)

This update for curl fixes the following issues : This security issue was fixed : CVE-2018-14618: Prevent integer overflow in the NTLM authentication code bsc1106019 The update package also includes non-security fixes. See advisory for details. Note that Tenable Network Security has extracted the...

openSUSE: Security Advisory for curl (openSUSE-SU-2018:2736-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for curl (moderate)

This update for curl fixes the following issues: This security issue was fixed: - CVE-2018-14618: Prevent integer overflow in the NTLM authentication code bsc1106019 This non-security issue was fixed: - Fixed erroneous debug message when paired with OpenSSL bsc1089533 This update was imported fro...

Security update for curl (moderate)

This update for curl fixes the following issues: This security issue was fixed: - CVE-2018-14618: Prevent integer overflow in the NTLM authentication code bsc1106019 This non-security issue was fixed: - Use OPENSSLconfig instead of CONFmodulesloadfile to avoid crashes due to openssl engines...

SUSE-SU-2018:2714-1 Security update for curl

This update for curl fixes the following issues: This security issue was fixed: - CVE-2018-14618: Prevent integer overflow in the NTLM authentication code bsc1106019 This non-security issue was fixed: - Use OPENSSLconfig instead of CONFmodulesloadfile to avoid crashes due to openssl engines...

SUSE-SU-2018:2715-1 Security update for curl

This update for curl fixes the following issues: This security issue was fixed: - CVE-2018-14618: Prevent integer overflow in the NTLM authentication code bsc1106019 This non-security issue was fixed: - Fixed erroneous debug message when paired with OpenSSL bsc1089533...

SUSE-SU-2018:2717-1 Security update for curl

This update for curl fixes the following issues: - CVE-2018-14618: Prevent integer overflow in the NTLM authentication code bsc1106019...

Security Bulletin: Vulnerabilities in cURL/libcURL affect IBM Flex System FC3171 8Gb SAN Switch & SAN Pass-thru

Summary The following vulnerabilities in cURL/libcURL have been addressed by IBM Flex System FC3171 8Gb SAN Switch & SAN Pass-thru. Vulnerability Details CVEID: CVE-2018-1000007 DESCRIPTION: cURL libcurl could allow a remote attacker to obtain sensitive information, caused by a flaw when passing ...

Fedora Update for curl FEDORA-2018-111044d435

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-1498-1 : curl security update

It was discovered that there was a an integer overflow vulnerability in curl, a command line tool for transferring data over HTTP, etc. For more information, please see : For Debian 8 'Jessie', this issue has been fixed in curl version 7.38.0-4+deb8u12. We recommend that you upgrade your curl...

Debian: Security Advisory (DLA-1498-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security fix for the ALT Linux 8 package curl version 7.61.1-alt1

Sept. 9, 2018 Anton Farygin 7.61.1-alt1 - 7.61.1 fixes: CVE-2018-14618...

[SECURITY] [DLA 1498-1] curl security update

Package : curl Version : 7.38.0-4+deb8u12 CVE IDs : CVE-2018-14618 CVE-2018-14618 It was discovered that there was a an integer overflow vulnerability in curl, a command line tool for transferring data over HTTP, etc. For more information, please see: https://curl.haxx.se/docs/CVE-2018-14618.html...

DLA-1498-1 curl - security update

Bulletin has no description...

cURL (libcurl) NTLM Authentication Code Buffer Overrun Vulnerability

curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Curlntlmcoremknthash multiplies the length of the password by two SUM to figure out how large temporary storage area to allocate from the heap. The length value is then subsequently...

FreeBSD : curl -- password overflow vulnerability (f4d638b9-e6e5-4dbe-8c70-571dbc116174)

curl security problems : CVE-2018-14618: NTLM password overflow via integer overflow The internal function Curlntlmcoremknthash multiplies the length of the password by two SUM to figure out how large temporary storage area to allocate from the heap. The length value is then subsequently used to...