CVE-2018-1000301
published 2018-05-24CVE-2018-1000301: curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be…
critical9.1CVSS 3.0
AVNACLPRNUINSUCHINAH
curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded RTSP content.. This vulnerability appears to have been fixed in curl = 7.60.0.
Affected
26 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| debian | curl | < curl 7.60.0-1 (bookworm) | curl 7.60.0-1 (bookworm) |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| haxx | curl | >= 0 < 7.60.0-1 | 7.60.0-1 |
| haxx | curl | >= 0 < 7.60.0-1 | 7.60.0-1 |
| haxx | curl | >= 0 < 7.60.0-1 | 7.60.0-1 |
| haxx | curl | >= 0 < 7.60.0-1 | 7.60.0-1 |
| haxx | curl | >= 0 < 7.35.0-1ubuntu2.16 | 7.35.0-1ubuntu2.16 |
| haxx | curl | >= 0 < 7.47.0-1ubuntu2.8 | 7.47.0-1ubuntu2.8 |
| haxx | curl | >= 0 < 7.58.0-2ubuntu3.1 | 7.58.0-2ubuntu3.1 |
| haxx | curl | 7.20.0 – 7.59.0 | — |
| oracle | communications_webrtc_session_controller | < 7.2 | 7.2 |
| oracle | enterprise_manager_ops_center | — | — |
| oracle | enterprise_manager_ops_center | — | — |
| oracle | peoplesoft_enterprise_peopletools | — | — |
| oracle | peoplesoft_enterprise_peopletools | — | — |
| oracle | peoplesoft_enterprise_peopletools | — | — |
| redhat | enterprise_linux_desktop | — | — |
| redhat | enterprise_linux_server | — | — |
CVSS provenance
nvdv3.09.1CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
osv9.8CRITICAL