PT-2018-1976 · Curl+3 · Curl+3
Harry Sintonen
·
Published
2018-09-28
·
Updated
2026-05-18
·
CVE-2018-16839
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Curl versions 7.33.0 through 7.61.1
Description
The issue is related to a buffer overrun in the SASL authentication code, which may lead to denial of service. This buffer overrun is located in the
Curl auth create plain message function and occurs in the heap. Exploitation of this issue may allow a remote attacker to cause a denial of service.Recommendations
For Curl versions 7.33.0 through 7.61.1, update to a version that contains a fix for this issue to prevent potential denial of service attacks.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
DoS
Buffer Overflow
Heap Based Buffer Overflow
Integer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Curl
Suse
Ubuntu