Denial Of Service (DoS) Through Double-free

🗓️ 20 Aug 2018 02:52:35Reported by Veracode Vulnerability DatabaseType

libcurl.so double-free DoS vulnerability in `security.c

Reporter	Title	Published	Views	Family All 134
IBM Security Bulletins	Security Bulletin: Vulnerabilities in cURL/libcurl affect IBM Flex System FC3171 8Gb SAN Switch and SAN Pass-thru, QLogic 8Gb Intelligent Pass-thru Module & SAN Switch Module for BladeCenter and QLogic Virtual Fabric Extension Module for IBM BladeCenter	31 Jan 201902:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in cURL affect IBM Flex System Chassis Management Module (CMM)	31 Jan 201902:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in cURL affect IBM Integrated Management Module II (IMM2) for System x, Flex and BladeCenter Systems	14 Apr 202314:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerabilities in curl	31 Jan 201902:25	–	ibm
FreeBSD	cURL -- multiple vulnerabilities	2 Nov 201600:00	–	freebsd
ALT Linux	Security fix for the ALT Linux 8 package curl version 7.51.0-alt1	2 Nov 201600:00	–	altlinux
Tenable Nessus	cURL/libcurl 7.x < 7.51.0 Multiple Vulnerabilities	9 Dec 201600:00	–	nessus
Tenable Nessus	Amazon Linux AMI : curl (ALAS-2016-766)	11 Nov 201600:00	–	nessus
Tenable Nessus	Rocky Linux 8.6 [CIQ] Security Update: curl / curl-debuginfo / curl-debugsource / curl-minimal / etc Multiple Vulnerabilities (ciqsa-2026_0030)	1 Oct 202600:00	–	nessus
Tenable Nessus	Rocky Linux 9.2 [CIQ] Security Update: curl / curl-debuginfo / curl-debugsource / curl-minimal / etc Multiple Vulnerabilities (ciqsa-2026_0406)	1 Oct 202600:00	–	nessus

Vulners

Node

libcurl.so libcurl.soRange4.1.1–4.3.0cpp

curl curlRange7.30.0.1–7.30.0.2cpp

Source	Link
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
curl	www.curl.haxx.se/docs/adv_20161102E.html
securitytracker	www.securitytracker.com/id/1037192
securityfocus	www.securityfocus.com/bid/94100
curl	www.curl.haxx.se/CVE-2016-8619.patch
security	www.security.gentoo.org/glsa/201701-47
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
tenable	www.tenable.com/security/tns-2016-21
oracle	www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
access	www.access.redhat.com/errata/RHSA-2018:2486

08 Nov 2023 00:32Current

8.7High risk

Vulners AI Score8.7

CVSS 35.3 - 9.8

CVSS 27.5

EPSS0.04989