Memory Leak

🗓️ 01 Aug 2018 10:15:27Reported by Veracode Vulnerability DatabaseType

libcurl.so vulnerable to memory leak due to `size_t` multiplication in `curl_maprintf()

Reporter	Title	Published	Views	Family All 127
IBM Security Bulletins	Security Bulletin: Vulnerabilities in cURL affect IBM Flex System Chassis Management Module (CMM)	31 Jan 201902:25	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in curl affect IBM Flex System Manager (FSM)	18 Jun 201801:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerabilities in curl	31 Jan 201902:25	–	ibm
FreeBSD	cURL -- multiple vulnerabilities	2 Nov 201600:00	–	freebsd
ALT Linux	Security fix for the ALT Linux 8 package curl version 7.51.0-alt1	2 Nov 201600:00	–	altlinux
Tenable Nessus	cURL/libcurl 7.x < 7.51.0 Multiple Vulnerabilities	9 Dec 201600:00	–	nessus
Tenable Nessus	Amazon Linux AMI : curl (ALAS-2016-766)	11 Nov 201600:00	–	nessus
Tenable Nessus	Debian DLA-711-1 : curl security update	18 Nov 201600:00	–	nessus
Tenable Nessus	Debian DSA-3705-1 : curl - security update	7 Nov 201600:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP2 : curl (EulerOS-SA-2017-1035)	1 May 201700:00	–	nessus

Vulners

Node

libcurl.so libcurl.soRange4.1.1–4.3.0cpp

curl curlRange7.30.0.1–7.30.0.2cpp

Source	Link
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
securitytracker	www.securitytracker.com/id/1037192
securityfocus	www.securityfocus.com/bid/94098
security	www.security.gentoo.org/glsa/201701-47
tenable	www.tenable.com/security/tns-2016-21
oracle	www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
access	www.access.redhat.com/errata/RHSA-2018:2486
access	www.access.redhat.com/errata/RHSA-2018:3558
curl	www.curl.haxx.se/docs/adv_20161102D.html

08 Nov 2023 00:38Current

9.1High risk

Vulners AI Score9.1

CVSS 35.3 - 9.8

CVSS 27.5

EPSS0.04574