Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:7435
HistorySep 06, 2018 - 1:26 a.m.

Denial Of Service (DoS) Through Integer Overflow

2018-09-0601:26:18
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11

0.012 Low

EPSS

Percentile

85.0%

libcurl.so is vulnerable to denial of service (DoS) through integer overflow attacks. The vulnerability exists due to the lack of bounds check on len as it is possible to overflow the value of size_t when performing malloc(len * 2) in Curl_ntlm_core_mk_nt_hash of curl_ntlm_core.c, allowing DoS attacks.