Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2016-8617

Опубликовано: 31 июл. 2018
Источник: nvd
CVSS3: 3.3
CVSS3: 7
CVSS2: 4.4
EPSS Низкий

Описание

The base64 encode function in curl before version 7.51.0 is prone to a buffer being under allocated in 32bit systems if it receives at least 1Gb as input via CURLOPT_USERNAME.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*
Версия до 7.51.0 (исключая)

EPSS

Процентиль: 25%
0.00081
Низкий

3.3 Low

CVSS3

7 High

CVSS3

4.4 Medium

CVSS2

Дефекты

CWE-787
CWE-787

Связанные уязвимости

CVSS3: 3.3
ubuntu
около 7 лет назад

The base64 encode function in curl before version 7.51.0 is prone to a buffer being under allocated in 32bit systems if it receives at least 1Gb as input via `CURLOPT_USERNAME`.

CVSS3: 3.3
redhat
почти 9 лет назад

The base64 encode function in curl before version 7.51.0 is prone to a buffer being under allocated in 32bit systems if it receives at least 1Gb as input via `CURLOPT_USERNAME`.

CVSS3: 3.3
debian
около 7 лет назад

The base64 encode function in curl before version 7.51.0 is prone to a ...

CVSS3: 7
github
больше 3 лет назад

The base64 encode function in curl before version 7.51.0 is prone to a buffer being under allocated in 32bit systems if it receives at least 1Gb as input via `CURLOPT_USERNAME`.

suse-cvrf
почти 9 лет назад

Security update for curl

EPSS

Процентиль: 25%
0.00081
Низкий

3.3 Low

CVSS3

7 High

CVSS3

4.4 Medium

CVSS2

Дефекты

CWE-787
CWE-787