PT-2016-7889 · Curl · Libcurl
Dan Mcnulty
·
Publicado
2016-12-21
·
Atualizado
2023-12-15
·
CVE-2016-9953
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
libcurl versions 7.30.0 through 7.51.0
Description
The issue allows remote attackers to obtain sensitive information, cause a denial of service (crash), or possibly have unspecified other impact via a wildcard certificate name, which triggers an out-of-bounds read. This occurs in the
verify certificate function when comparing a wildcard certificate name to the hostname used to make the connection to the server. The pattern matching logic exhibits an out of bounds read, potentially leaking the contents of memory immediately preceding the connection hostname buffer.Recommendations
For libcurl versions 7.30.0 through 7.51.0, consider disabling the
verify certificate function until a patch is available, or restrict the use of wildcard certificate names to minimize the risk of exploitation. Additionally, ensure that the CertGetNameString() function is used carefully to avoid potential out-of-bounds reads. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Out of bounds Read
Buffer Over-read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Libcurl