cbcvebase.
CVE-2024-7264
published 2024-07-31

CVE-2024-7264: libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the…

medium6.5CVSS 3.1
AVNACLPRNUIRSUCNINAH
libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the parser might end up using -1 for the length of the *time fraction*, leading to a `strlen()` getting performed on a pointer to a heap buffer area that is not (purposely) null terminated. This flaw most likely leads to a crash, but can also lead to heap contents getting returned to the application when [CURLINFO_CERTINFO](https://curl.se/libcurl/c/CURLINFO_CERTINFO.html) is used.

Affected

134 ranges· showing 25
VendorProductVersion rangeFixed in
appleios_18.7.3_and_ipados
appleios_26.2_and_ipados
applemacos_sequoia
applemacos_sonoma
applemacos_tahoe
appletvos
applevisionos
applewatchos
curlcurl7.32.0 – 7.32.0
curlcurl7.33.0 – 7.33.0
curlcurl7.34.0 – 7.34.0
curlcurl7.35.0 – 7.35.0
curlcurl7.36.0 – 7.36.0
curlcurl7.37.0 – 7.37.0
curlcurl7.37.1 – 7.37.1
curlcurl7.38.0 – 7.38.0
curlcurl7.39.0 – 7.39.0
curlcurl7.40.0 – 7.40.0
curlcurl7.41.0 – 7.41.0
curlcurl7.42.0 – 7.42.0
curlcurl7.42.1 – 7.42.1
curlcurl7.43.0 – 7.43.0
curlcurl7.44.0 – 7.44.0
curlcurl7.45.0 – 7.45.0
curlcurl7.46.0 – 7.46.0

CVSS provenance

nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
osv6.5MEDIUM