PT-2017-18972 · Curl+1 · Curl+1

Marcel Raad · Published 2017-06-14 · Updated 2024-06-15 · CVE-2017-9502

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions curl versions prior to 7.54.1

Description The issue arises when libcurl's default protocol function is used with a URL lacking a scheme part, specifically on Windows and DOS systems. If the default protocol is set to FILE or a file: URL lacks two slashes and starts with a drive letter, libcurl overwrites a heap-based memory buffer with seven bytes. This occurs because libcurl copies the path with a wrong offset, writing beyond the malloc buffer.

Recommendations For versions prior to 7.54.1, update to version 7.54.1 or later to resolve the issue. As a temporary workaround, consider avoiding the use of file: URLs without two slashes following the colon, and refrain from setting the default scheme to FILE when working with URLs that start with a drive letter on Windows or DOS systems.

Fix

DoS

Buffer Overflow

Heap Based Buffer Overflow

Weakness Enumeration

CWE-119

CWE-122

Related Identifiers

ALT-PU-2017-1726

ALT-PU-2018-2456

CVE-2017-9502

OPENSUSE-SU-2024:10582-1

Affected Products

Alt Linux

Curl

References · 92

• https://safe-surf.ru/specialists/bulletins-nkcki/683203 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9502 · Security Note
• https://bdu.fstec.ru/vul/2018-01424 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000101 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000301 · Security Note
• https://errata.altlinux.org/ALT-PU-2017-1726 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2018-2456 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000257 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2017-9502 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000300 · Security Note
• https://osv.dev/vulnerability/CURL-CVE-2017-9502 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9586 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8817 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8818 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000100 · Security Note