Stack-based Buffer Overflow

🗓️ 30 Jul 2024 08:52:19Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 23 Views

libcurl.so Stack-based Buffer Overflo

Reporter	Title	Published	Views	Family All 94
IBM Security Bulletins	Security Bulletin: IBM QRadar Wincollect is vulnerable to using components with known vulnerabilities	11 Sep 202408:43	–	ibm
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to stack overwrite due to the libcurl package (CVE-2024-6197)	2 Sep 202514:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2024.	15 Apr 202502:56	–	ibm
IBM Security Bulletins	Security Bulletin: PowerSC is vulnerable to information disclosure, denial of service, and security restrictions bypass due to Curl	4 Dec 202422:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM WebSphere Application Server Liberty, OpenSSL, libcurl, IBM Java, and IBM Storage Protect Backup-Archive Client may affect IBM Storage Protect Backup-Archive Client	18 Oct 202412:50	–	ibm
AlpineLinux	CVE-2024-6197	24 Jul 202407:29	–	alpinelinux
CBLMariner	CVE-2024-6197 affecting package curl for versions less than 8.8.0-2	15 Oct 202418:24	–	cbl_mariner
CBLMariner	CVE-2024-6197 affecting package cmake for versions less than 3.30.3-2	1 Oct 202418:58	–	cbl_mariner
CBLMariner	CVE-2024-6197 affecting package curl for versions less than 8.8.0-2	12 Sep 202423:01	–	cbl_mariner
Circl	CVE-2024-6197	24 Jul 202410:47	–	circl

Vulners

Node

curl curlMatch7.72.0-1debian

AND

debian debian_linuxMatch999

curl curlMatch8.5.0-r0cpp

AND

curl curlMatch8.1.0-r2cpp

AND

curl curlMatch7.88.1-r0cpp

AND

curl curlMatch8.2.0-r1cpp

AND

curl curlMatch7.86.0-r1cpp

AND

curl curlMatch8.3.0-r0cpp

AND

curl curlMatch7.87.0-r2cpp

AND

curl curlMatch8.1.2-r0cpp

AND

curl curlMatch8.0.1-r0cpp

AND

curl curlMatch7.87.0-r0cpp

AND

curl curlMatch8.2.1-r0cpp

AND

curl curlMatch8.1.1-r1cpp

AND

curl curlMatch8.4.0-r0cpp

AND

curl curlMatch7.88.1-r1cpp

AND

curl curlMatch7.87.0-r1cpp

AND

alpinelinux alpine_linuxMatch3.17

curl curlMatch7.69.0-r0cpp

AND

curl curlMatch7.84.0-r2cpp

AND

curl curlMatch7.84.0-r0cpp

AND

curl curlMatch8.0.1-r3cpp

AND

curl curlMatch8.8.0-r0cpp

AND

curl curlMatch7.78.0-r2cpp

AND

curl curlMatch8.1.0-r3cpp

AND

curl curlMatch7.86.0-r1cpp

AND

curl curlMatch8.4.0-r0cpp

AND

curl curlMatch7.87.0-r3cpp

AND

curl curlMatch7.81.0-r1cpp

AND

curl curlMatch8.5.0-r0cpp

AND

curl curlMatch7.83.1-r1cpp

AND

curl curlMatch8.3.0-r0cpp

AND

curl curlMatch7.83.0-r0cpp

AND

curl curlMatch7.88.1-r1cpp

AND

curl curlMatch8.1.2-r2cpp

AND

curl curlMatch7.76.1-r0cpp

AND

curl curlMatch7.84.0-r1cpp

AND

curl curlMatch7.77.0-r0cpp

AND

curl curlMatch7.75.0-r0cpp

AND

curl curlMatch8.6.0-r0cpp

AND

curl curlMatch7.78.0-r0cpp

AND

curl curlMatch8.3.0-r1cpp

AND

curl curlMatch8.1.2-r1cpp

AND

curl curlMatch7.80.0-r0cpp

AND

curl curlMatch7.69.0-r1cpp

AND

curl curlMatch7.79.1-r0cpp

AND

curl curlMatch7.87.0-r0cpp

AND

curl curlMatch7.69.1-r0cpp

AND

curl curlMatch7.76.0-r0cpp

AND

curl curlMatch7.82.0-r0cpp

AND

curl curlMatch7.68.0-r0cpp

AND

curl curlMatch8.2.1-r0cpp

AND

curl curlMatch8.0.1-r0cpp

AND

curl curlMatch8.7.1-r0cpp

AND

curl curlMatch8.1.1-r1cpp

AND

curl curlMatch8.1.2-r0cpp

AND

curl curlMatch7.81.0-r0cpp

AND

curl curlMatch8.0.1-r1cpp

AND

curl curlMatch7.79.0-r0cpp

AND

curl curlMatch7.85.0-r0cpp

AND

curl curlMatch8.2.0-r1cpp

AND

curl curlMatch8.8.0-r1cpp

AND

curl curlMatch7.77.0-r1cpp

AND

curl curlMatch7.87.0-r1cpp

AND

curl curlMatch8.0.1-r2cpp

AND

alpinelinux alpine_linuxMatchedge

curl curlMatch8.8.0-r0cpp

AND

curl curlMatch8.7.1-r0cpp

AND

alpinelinux alpine_linuxMatch3.20

curl curlMatch8.4.0-r0cpp

AND

curl curlMatch8.0.1-r2cpp

AND

curl curlMatch8.1.2-r0cpp

AND

curl curlMatch8.3.0-r0cpp

AND

curl curlMatch8.5.0-r0cpp

AND

curl curlMatch8.2.1-r0cpp

AND

curl curlMatch8.2.0-r1cpp

AND

curl curlMatch8.1.1-r1cpp

AND

curl curlMatch8.1.0-r2cpp

AND

alpinelinux alpine_linuxMatch3.18

curl curlMatch8.4.0-r0cpp

AND

curl curlMatch8.5.0-r0cpp

AND

alpinelinux alpine_linuxMatch3.19

libcurl.so libcurl.soRange4.8.0.debug–4.8.0cpp

Source	Link
github	www.github.com/curl/curl/commit/3a537a4db9e65e545ec45b1b5d5575ee09a2569d
curl	www.curl.se/docs/CVE-2024-6197.html
hackerone	www.hackerone.com/reports/2559516
security	www.security.netapp.com/advisory/ntap-20241129-0008/
openwall	www.openwall.com/lists/oss-security/2024/07/24/1
openwall	www.openwall.com/lists/oss-security/2024/07/24/5
curl	www.curl.se/docs/CVE-2024-6197.json

26 Aug 2024 16:50Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.17.5

EPSS0.01302

SSVC