Out-of-Bounds Read

🗓️ 01 Nov 2018 08:41:05Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 38 Views

libcurl.so vulnerability warning displa

Reporter	Title	Published	Views	Family All 148
IBM Security Bulletins	Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by vulnerabilities in cURL (CVE-2018-14618 CVE-2018-16840 CVE-2018-16842)	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerabilities in cURL (CVE-2018-16840 CVE-2018-16842)	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Advanced Cloud Pak is vulnerable to a buffer overflow in the curl command (CVE-2018-16842)	7 May 201917:15	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in Red Hat® Enterprise Linux (RHEL) Server shipped with PurePower Integrated Manager (PPIM)	20 Dec 201908:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities affect IBM® Cloud Private - fluentd	12 Feb 201918:05	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Curl used in OS image for RedHat Enterprise Linux for Cloud Pak System (CVE-2018-16842)	6 May 202012:02	–	ibm
IBM Security Bulletins	Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801-s, 1801-t and 1801-u	5 Dec 201822:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM BladeCenter Advanced Management Module (AMM) is affected by vulnerabilities in cURL (CVE-2018-16840 CVE-2018-16842)	11 Apr 201920:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Event Streams is affected by cURL vulnerabilities	17 Dec 201816:15	–	ibm
Tenable Nessus	Amazon Linux 2 : curl (ALAS-2019-1162)	19 Feb 201900:00	–	nessus

Vulners

Node

libcurl.so libcurl.soMatch4.3.0cpp

libcurl.so libcurl.soMatch4.1.1cpp

curl curlMatch7.29.0_46.el7

curl curlMatch7.29.0_51.el7

curl curlMatch7.29.0_51.el7_6.3

curl curlMatch7.29.0_32.el7

curl curlRange7.30.0.1–7.30.0.2cpp

Source	Link
github	www.github.com/curl/curl/commit/d530e92f59ae9bb2d47066c3c460b25d2ffeb211
curl	www.curl.haxx.se/docs/CVE-2018-16842.html
securitytracker	www.securitytracker.com/id/1042014
lists	www.lists.debian.org/debian-lts-announce/2018/11/msg00005.html
debian	www.debian.org/security/2018/dsa-4331
security	www.security.gentoo.org/glsa/201903-03
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
oracle	www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
access	www.access.redhat.com/errata/RHSA-2019:2181
usn	www.usn.ubuntu.com/3805-1/

06 Aug 2019 20:05Current

9High risk

Vulners AI Score9

CVSS 34.4 - 9.1

CVSS 26.4

EPSS0.00162