CVE-2024-7264 — Out-of-bounds Read in Libcurl
Severity
6.5MEDIUMNVD
EPSS
0.9%
top 24.56%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJul 31
Latest updateDec 12
Description
libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an
ASN.1 Generalized Time field. If given an syntactically incorrect field, the
parser might end up using -1 for the length of the *time fraction*, leading to
a `strlen()` getting performed on a pointer to a heap buffer area that is not
(purposely) null terminated.
This flaw most likely leads to a crash, but can also lead to heap contents
getting returned to the application when
[CURLINFO_CERTINFO](https://curl.se/libcu…
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6
Affected Packages5 packages
🔴Vulnerability Details
5OSV▶
CVE-2024-7264: libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an
ASN↗2024-07-31
GHSA▶
GHSA-97c4-2w4v-c7r8: libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an
ASN↗2024-07-31
OSV▶
CVE-2024-7264: libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an ASN↗2024-07-31