The vulnerability of the NTLM type-3 password creation function in the libcurl library allows a hacker to induce a service failure.

The vulnerability of the libcurl library is related to the issue of reading operations going beyond the buffer boundaries in the NTLM type-3 header creation function. This function generates the HTTP request header based on previously obtained data without checking the local buffer. Exploiting th...

UBUNTU-CVE-2019-3822

libcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow. The function creating an outgoing NTLM type-3 header lib/vauth/ntlm.c:Curlauthcreatentlmtype3message, generates the request HTTP header contents based on previously received data. The check that exists ...