PT-2016-7889 · Curl · Libcurl

Dan Mcnulty · Published 2016-12-21 · Updated 2023-12-15 · CVE-2016-9953

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions libcurl versions 7.30.0 through 7.51.0

Description The issue allows remote attackers to obtain sensitive information, cause a denial of service (crash), or possibly have unspecified other impact via a wildcard certificate name, which triggers an out-of-bounds read. This occurs in the verify certificate function when comparing a wildcard certificate name to the hostname used to make the connection to the server. The pattern matching logic exhibits an out of bounds read, potentially leaking the contents of memory immediately preceding the connection hostname buffer.

Recommendations For libcurl versions 7.30.0 through 7.51.0, consider disabling the verify certificate function until a patch is available, or restrict the use of wildcard certificate names to minimize the risk of exploitation. Additionally, ensure that the CertGetNameString() function is used carefully to avoid potential out-of-bounds reads. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Buffer Over-read

Weakness Enumeration

CWE-125

CWE-126

Related Identifiers

CVE-2016-9953

Affected Products

Libcurl

References · 8

• https://osv.dev/vulnerability/CURL-CVE-2016-9953 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-9953 · Vendor Advisory
• https://curl.haxx.se/docs/adv_20161221C.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-9953 · Security Note
• https://curl.haxx.se/CVE-2016-9952.patch · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2016-9953 · Vendor Advisory
• https://t.me/cvenotify/63799 · Telegram Post
• https://security.alpinelinux.org/vuln/CVE-2016-9953 · Note