The vulnerability of the smtp_endofresp function in the libcurl library allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the smtpendofresp function in the libcurl library relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2019-3823: Out-of-bounds Read

libcurl versions from 7.34.0 to before 7.64.0 are vulnerable to a heap out-of-bounds read in the code handling the end-of-response for SMTP. If the buffer passed to smtpendofresp isn't NUL terminated and contains no character ending the parsed number, and len is set to 5, then the strtol call rea...