CVE-2017-7407

🗓️ 03 Apr 2017 00:00:00Reported by ubuntu.comType

The ourWriteOut function in tool_writeout.c in curl 7.53.1 may allow attackers to obtain sensitive information from process memory by reading a workstation screen during the use of a --write-out argument ending in a '%' character, leading to a heap-based buffer over-read

Reporter	Title	Published	Views	Family All 93
FreeBSD	cURL -- potential memory disclosure	3 Apr 201700:00	–	freebsd
IBM Security Bulletins	Security Bulletin: Vulnerabilities in cURL/libcurl affect Intel® Manycore Platform Software Stack (Intel® MPSS) for Linux and Windows	31 Jan 201902:40	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in curl affects IBM Chassis Management Module (CVE-2017-7407)	31 Jan 201902:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in curl affect IBM Integrated Management Module II (IMM2) for System x, Flex and BladeCenter Systems	14 Apr 202314:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in curl affect IBM Flex System Manager (FSM) (CVE-2016-9586, CVE-2017-7407 )	18 Jun 201801:38	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in curl affect IBM BladeCenter Advanced Management Module (AMM) (CVE-2016-9586, CVE-2017-7407)	14 Apr 202314:32	–	ibm
Amazon	Low: curl	22 Jun 201700:00	–	amazon
Tenable Nessus	Amazon Linux AMI : curl (ALAS-2017-850)	23 Jun 201700:00	–	nessus
Tenable Nessus	Debian DLA-883-1 : curl security update	5 Apr 201700:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.5.3 : curl (EulerOS-SA-2019-1172)	9 Apr 201900:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Ubuntu	14.04	all	curl	7.35.0-1ubuntu2.11	curl_7.35.0-1ubuntu2.11_all.deb
Ubuntu	16.04	all	curl	7.47.0-1ubuntu2.3	curl_7.47.0-1ubuntu2.3_all.deb
Ubuntu	17.04	all	curl	7.52.1-4ubuntu1.2	curl_7.52.1-4ubuntu1.2_all.deb

Source	Link
curl	www.curl.haxx.se/docs/adv_20170403.html
ubuntu	www.ubuntu.com/security/notices/USN-3441-1
ubuntu	www.ubuntu.com/security/notices/USN-3441-2
cve	www.cve.org/CVERecord

25 Aug 2025 22:37Current

6.9Medium risk

Vulners AI Score6.9

CVSS 22.1

CVSS 32.4

CVSS 3.12.4

EPSS0.00581

SSVC