PT-2015-7938 · Curl · Curl

Publicado 2015-11-10 · Atualizado 2015-11-10

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions curl (affected versions not specified)

Description A use-after-free issue was discovered in the Curl object's HTTPPOST setopt when a Unicode value is passed with a FORM BUFFERPTR. This occurs because the str object created from the passed-in unicode object would have its buffer used, but the unicode object would be stored instead of the str object.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

MGASA-2015-0440

Produtos afetados

Curl

Referências · 5

• https://bugs.mageia.org/show_bug.cgi?id=17077 · Nota
• https://lists.fedoraproject.org/pipermail/package-announce/2015-November/170967.html · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2015/11/03/4 · Nota
• https://advisories.mageia.org/MGASA-2015-0440.html · Nota de Segurança
• https://osv.dev/vulnerability/MGASA-2015-0440 · Aviso do Fabricante