CVE-2005-4077: Multiple off-by-one errors in the cURL library (libcurl) 7.11.2 through 7.15.0 allow local users to trigger a buffer overflow and cause a denial of service or…

PriorityP413medium4.6CVSS 2.0

AVLACLAuNCPIPAP

EPSS

0.27%

50.5th percentile

Multiple off-by-one errors in the cURL library (libcurl) 7.11.2 through 7.15.0 allow local users to trigger a buffer overflow and cause a denial of service or bypass PHP security restrictions via certain URLs that (1) are malformed in a way that prevents a terminating null byte from being added to either a hostname or path buffer, or (2) contain a "?" separator in the hostname portion, which causes a "/" to be prepended to the resulting string.

Affected

16 ranges

Vendor	Product	Version range	Fixed in
daniel_stenberg	curl	—	—
daniel_stenberg	curl	—	—
daniel_stenberg	curl	—	—
daniel_stenberg	curl	—	—
daniel_stenberg	curl	—	—
daniel_stenberg	curl	—	—
daniel_stenberg	curl	—	—
daniel_stenberg	curl	—	—
daniel_stenberg	curl	—	—
daniel_stenberg	curl	—	—
daniel_stenberg	curl	—	—
debian	curl	< curl 7.15.1-1 (bookworm)	curl 7.15.1-1 (bookworm)
haxx	curl	>= 0 < 7.15.1-1	7.15.1-1
haxx	curl	>= 0 < 7.15.1-1	7.15.1-1
haxx	curl	>= 0 < 7.15.1-1	7.15.1-1
haxx	curl	>= 0 < 7.15.1-1	7.15.1-1

CVSS provenance

nvdv2.04.6MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P

osv4.6MEDIUM

vendor_debian4.6MEDIUM

vendor_redhat4.6MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.