Heap-Based Buffer Overflow

libcurl is vulnerable to heap-based buffer overflow. The vulnerability is due to not using upload buffer size for scratch buffer in Curlsmtpescapeeob in lib/smtp.c. It is possible only when an attacker can get control over the data transmitted over SMTP using curl with certain settings i.e., use ...

CURL-CVE-2018-0500 SMTP send heap buffer overflow

curl might overflow a heap based memory buffer when sending data over SMTP and using a reduced read buffer. When sending data over SMTP, curl allocates a separate "scratch area" on the heap to be able to escape the uploaded data properly if the uploaded data contains data that requires it. The si...