CVE-2019-3822

libcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow. The function creating an outgoing NTLM type-3 header "lib/vauth/ntlm.c:Curlauthcreatentlmtype3message", generates the request HTTP header contents based on previously received data. The check that exist...