PT-2015-6114 · Curl+1 · Libcurl+1

Daniel Stenberg · Published 2015-06-17 · Updated 2024-06-15 · CVE-2015-3237

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:P

Name of the Vulnerable Software and Affected Versions libcurl versions 7.40.0 through 7.42.1

Description The issue allows remote SMB servers to obtain sensitive information from memory or cause a denial of service. This is due to the smb request state() function in libcurl's state machine handling the SMB protocol, where two length and offset values are extracted from network data without boundary checks. These values are then used to determine the data range to send back, allowing malicious SMB servers to trick libcurl into sending unintended data or crashing by accessing invalid memory.

Recommendations For libcurl versions 7.40.0 through 7.42.1, consider disabling the smb request state() function as a temporary workaround until a patch is available. Restrict access to SMB servers to minimize the risk of exploitation. Avoid using libcurl to handle SMB protocol requests until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

RCE

Buffer Over-read

Weakness Enumeration

CWE-20

CWE-126

Related Identifiers

ALT-PU-2015-1555

CVE-2015-3237

MGASA-2015-0263

OPENSUSE-SU-2024:10303-1

Affected Products

Alt Linux

Libcurl

References · 53

• https://osv.dev/vulnerability/openSUSE-SU-2024:10303-1 · Vendor Advisory
• https://security.gentoo.org/glsa/201509-02 · Vendor Advisory
• http://oracle.com/technetwork/security-advisory/cpujul2016-2881720.html · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2015-3237 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2015-3237 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160660.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2015-3237 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2015-0263 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-3237 · Security Note
• http://curl.haxx.se/docs/adv_20150617B.html · Vendor Advisory
• https://osv.dev/vulnerability/CURL-CVE-2015-3237 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2015-0263.html · Security Note
• https://suse.com/security/cve/CVE-2014-3620 · Note
• https://suse.com/security/cve/CVE-2016-8616 · Note
• https://suse.com/security/cve/CVE-2016-8621 · Note