Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2016-2472

Критический

ALT-PU-2016-2472: package curl update to version 7.52.0-alt1.S1

Источник
errata.altlinux.org
Дата публикации
21.12.2016
Дата обновления
04.02.2026
Устраненные уязвимости
3

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades curl to version 7.52.0-alt1.S1.

Устраненные уязвимости3

Связанные уязвимости

CVSS3: 8.1
ubuntu
больше 8 лет назад

curl before version 7.52.0 is vulnerable to a buffer overflow when doing a large floating point output in libcurl's implementation of the printf() functions. If there are any application that accepts a format string from the outside without necessary input filtering, it could allow remote attacks.

CVSS3: 5.9
redhat
почти 10 лет назад

curl before version 7.52.0 is vulnerable to a buffer overflow when doing a large floating point output in libcurl's implementation of the printf() functions. If there are any application that accepts a format string from the outside without necessary input filtering, it could allow remote attacks.

CVSS3: 8.1
nvd
больше 8 лет назад

curl before version 7.52.0 is vulnerable to a buffer overflow when doing a large floating point output in libcurl's implementation of the printf() functions. If there are any application that accepts a format string from the outside without necessary input filtering, it could allow remote attacks.

CVSS3: 8.1
debian
больше 8 лет назад

curl before version 7.52.0 is vulnerable to a buffer overflow when doi ...

CVSS3: 8.1
github
больше 4 лет назад

curl before version 7.52.0 is vulnerable to a buffer overflow when doing a large floating point output in libcurl's implementation of the printf() functions. If there are any application that accepts a format string from the outside without necessary input filtering, it could allow remote attacks.