PT-2015-7938 · Curl · Curl

Published 2015-11-10 · Updated 2015-11-10

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions curl (affected versions not specified)

Description A use-after-free issue was discovered in the Curl object's HTTPPOST setopt when a Unicode value is passed with a FORM BUFFERPTR. This occurs because the str object created from the passed-in unicode object would have its buffer used, but the unicode object would be stored instead of the str object.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

MGASA-2015-0440

Affected Products

Curl

References · 5

• https://lists.fedoraproject.org/pipermail/package-announce/2015-November/170967.html · Vendor Advisory
• https://advisories.mageia.org/MGASA-2015-0440.html · Security Note
• https://osv.dev/vulnerability/MGASA-2015-0440 · Vendor Advisory
• https://bugs.mageia.org/show_bug.cgi?id=17077 · Note
• http://openwall.com/lists/oss-security/2015/11/03/4 · Note