Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:7152
HistoryJul 25, 2018 - 5:49 a.m.

Denial Of Service (DoS)

2018-07-2505:49:29
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

JSON

libcurl.so is susceptible to denial of service(DoS). The vulnerability exists because the curl_easy_unescape function in lib/escape.c only terminates string parsing when a zero byte is used, leading to heap corruption that can crash the application or cause arbitrary code to be executed.

CPENameOperatorVersion
libcurl.sole4.7.0

Related

securityvulns 2
veracode 1
prion 1
oraclelinux 1
nessus 25
openvas 27
altlinux 1
seebug 1
ubuntu 1
cve 1
fedora 8
debian 2
centos 1
mageia 1
redhat 2
freebsd 1
slackware 1
ubuntucve 1
debiancve 1
gentoo 1
ibm 8
ics 1
oracle 1
securityvulns
securityvulns
libcurl uninitialized memory reference
2013-07-01 00:00:00
[ MDVSA-2013:180 ] curl
2013-07-01 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 08:55:13
prion
prion
Heap overflow
2013-07-31 13:20:00
oraclelinux
oraclelinux
curl security update
2013-06-25 00:00:00
nessus
nessus
SuSE 11.3 Security Update : curl (SAT Patch Number 7932)
2013-07-18 00:00:00
Mandriva Linux Security Advisory : curl (MDVSA-2013:180)
2013-06-28 00:00:00
Debian DSA-2713-1 : curl - heap overflow
2013-06-25 00:00:00
openvas
openvas
Debian Security Advisory DSA 2713-1 (curl - heap overflow)
2013-06-24 00:00:00
Oracle: Security Advisory (ELSA-2013-0983)
2015-10-06 00:00:00
Slackware: Security Advisory (SSA:2013-174-01)
2022-04-21 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 6 package curl version 7.24.0-alt1.M60P.1
2013-06-24 00:00:00
seebug
seebug
cURL/libcURL 'curl_easy_unescape()'堆内存破坏漏洞
2013-06-26 00:00:00
ubuntu
ubuntu
curl vulnerability
2013-07-02 00:00:00
cve
cve
CVE-2013-2174
2013-07-31 13:20:00
fedora
fedora
[SECURITY] Fedora 19 Update: curl-7.29.0-7.fc19
2013-06-29 18:44:03
[SECURITY] Fedora 17 Update: curl-7.24.0-10.fc17
2013-07-23 01:11:16
[SECURITY] Fedora 19 Update: curl-7.29.0-13.fc19
2014-02-15 20:02:19
debian
debian
[SECURITY] [DSA 2713-1] curl security update
2013-06-24 21:18:14
[SECURITY] [DSA 2713-1] curl security update
2013-06-24 21:18:14
centos
centos
curl, libcurl security update
2013-06-26 02:20:36
mageia
mageia
Updated curl packages fix CVE-2013-2174
2013-06-26 22:44:41
redhat
redhat
(RHSA-2013:0983) Moderate: curl security update
2013-06-25 00:00:00
(RHSA-2013:1076) Important: rhev-hypervisor6 security and bug fix update
2013-07-16 00:00:00
freebsd
freebsd
cURL library -- heap corruption in curl_easy_unescape
2013-06-22 00:00:00
slackware
slackware
[slackware-security] curl
2013-06-23 22:07:06
ubuntucve
ubuntucve
CVE-2013-2174
2013-06-24 00:00:00
debiancve
debiancve
CVE-2013-2174
2013-07-31 13:20:00
gentoo
gentoo
cURL: Multiple vulnerabilities
2014-01-20 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in cURL affect System x Integrated Management Module (IMM) (CVE-2013-2174, CVE-2014-0015, CVE-2014-138, CVE-2014-0139)
2019-01-31 01:35:01
Security Bulletin: Vulnerabilities in cURL affect System x Integrated Management Module (IMM) (CVE-2013-2174, CVE-2014-0015, CVE-2014-0138, CVE-2014-0139)
2019-01-31 01:35:01
Security Bulletin: Vulnerabilities in curl affect IBM Flex System Manager (FSM): (CVE-2013-2174 CVE-2013-4545 CVE-2014-0015 CVE-2014-0138 CVE-2014-013)
2019-01-31 01:30:01
ics
ics
Hitachi Energy MSM Product
2022-08-30 12:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - July 2015
2015-07-14 00:00:00

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

JSON
Related for VERACODE:7152
securityvulns2veracode1prion1oraclelinux1nessus25openvas27altlinux1seebug1ubuntu1cve1fedora8debian2centos1mageia1redhat2freebsd1slackware1ubuntucve1debiancve1gentoo1ibm8ics1oracle1