Heap Buffer Over-Read

2024-08-0108:06:37

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

libcurl

heap buffer over-read

gtime2str

vulnerability

sensitive information disclosure

curlinfo_certinfo

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

6.1

Confidence

Low

EPSS

0.001

Percentile

23.6%

JSON

libcurl.so is vulnerable to a Heap Buffer Over-Read. The vulnerability is due to improper handling of invalid ASN.1 Generalized Time fields in the GTime2str() function via lib/x509asn1.c. which allows an attacker to disclose sensitive information by exposing heap contents through the CURLINFO_CERTINFO function.