PT-2018-2550 · Curl+5 · Curl+5
Brian Carpenter
·
Published
2018-07-18
·
Updated
2026-05-18
·
CVE-2018-16842
CVSS v3.1
9.1
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Curl versions 7.14.1 through 7.61.1
Description
The issue is related to a heap-based buffer over-read in the
voutf() function, which may result in information exposure and denial of service. This occurs due to flawed wrap logic when displaying warning and informational messages to stderr, causing the buffer arithmetic to calculate the remainder wrong and end up reading behind the end of the buffer. This could lead to information disclosure or crash, potentially resulting in a security issue if used in certain situations, such as a server using the curl command line to run something and showing stderr to the user, where user input can trigger the crash and disclose user memory contents.Recommendations
For Curl versions 7.14.1 through 7.61.1, update to a version that contains a fix for this issue to prevent information exposure and denial of service. As a temporary workaround, consider restricting user input for parts of the command line input to prevent triggering the crash. Additionally, avoid using the
voutf() function in situations where user input can cause the buffer over-read.Fix
DoS
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Centos
Curl
Red Hat
Suse
Ubuntu