Design/Logic Flaw

curl before version 7.52.1 is vulnerable to an uninitialized random in libcurl's internal function that returns a good 32bit random value. Having a weak or virtually non-existent random value makes the operations that use it vulnerable...

CVE-2016-9594

curl before version 7.52.1 is vulnerable to an uninitialized random in libcurl's internal function that returns a good 32bit random value. Having a weak or virtually non-existent random value makes the operations that use it vulnerable...

CVE-2016-9594

CVE-2016-9594 affects curl/libcurl from 7.52.0, where an internal function intended to return a 32-bit random value could overwrite the destination pointer, yielding weak/non-random nonces for Digest/NTLM and related HTTP form data. This enabled potential remote code execution via crafted input. ...

PT-2016-7788

Name of the Vulnerable Software and Affected Versions curl versions prior to 7.52.1 Description The issue arises from an uninitialized random value in libcurl's internal function, which is used to generate nonces for Digest and NTLM authentication, boundary strings in HTTP formposts, and more. Th...