PT-2013-1238 · Curl+3 · Libcurl+4
Timo Sirainen
·
Published
2013-06-22
·
Updated
2024-06-15
·
CVE-2013-2174
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
cURL versions 7.7 through 7.30.0
libcurl versions prior to 7.34.0
Description
The issue is related to a heap-based buffer overflow in the
curl easy unescape function, which can be exploited by remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted string ending in a "%" character. The function decodes URL encoded strings to raw binary data and can be vulnerable to heap corruption due to bad checking of input data. The estimated risk for exploiting this flaw is considered low, but it may be possible for specific circumstances.Recommendations
For cURL versions 7.7 through 7.30.0, update to a version later than 7.30.0 to resolve the issue.
For libcurl versions prior to 7.34.0, update to version 7.34.0 or later to fix the vulnerability.
As a temporary workaround, consider restricting the use of the
curl easy unescape function until a patch is available.Exploit
Fix
DoS
Buffer Over-read
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Centos
Red Hat
Suse
Curl
Libcurl