PT-2013-1238 · Curl+3 · Libcurl+4
Timo Sirainen
·
Publicado
2013-06-22
·
Atualizado
2024-06-15
·
CVE-2013-2174
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
cURL versions 7.7 through 7.30.0
libcurl versions prior to 7.34.0
Description
The issue is related to a heap-based buffer overflow in the
curl easy unescape function, which can be exploited by remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted string ending in a "%" character. The function decodes URL encoded strings to raw binary data and can be vulnerable to heap corruption due to bad checking of input data. The estimated risk for exploiting this flaw is considered low, but it may be possible for specific circumstances.Recommendations
For cURL versions 7.7 through 7.30.0, update to a version later than 7.30.0 to resolve the issue.
For libcurl versions prior to 7.34.0, update to version 7.34.0 or later to fix the vulnerability.
As a temporary workaround, consider restricting the use of the
curl easy unescape function until a patch is available.Exploit
Correção
DoS
Buffer Over-read
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Centos
Red Hat
Suse
Curl
Libcurl