Описание
A buffer overflow exists in curl 7.12.3 to and including curl 7.58.0 in the FTP URL handling that allows an attacker to cause a denial of service or worse.
It was found that libcurl did not safely parse FTP URLs when using the CURLOPT_FTP_FILEMETHOD method. An attacker, able to provide a specially crafted FTP URL to an application using libcurl, could write a NULL byte at an arbitrary location, resulting in a crash or an unspecified behavior.
Меры по смягчению последствий
Preventing application from using non-default CURLOPT_FTP_FILEMETHOD will avoid triggering the vulnerable code.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| .NET Core 1.0 on Red Hat Enterprise Linux | rh-dotnetcore10-curl | Out of support scope | ||
| .NET Core 1.1 on Red Hat Enterprise Linux | rh-dotnetcore11-curl | Out of support scope | ||
| .NET Core 2.0 on Red Hat Enterprise Linux | rh-dotnet20-curl | Out of support scope | ||
| .NET Core 2.1 on Red Hat Enterprise Linux | rh-dotnet21-curl | Will not fix | ||
| Red Hat Ceph Storage 2 | curl | Will not fix | ||
| Red Hat Enterprise Linux 5 | curl | Will not fix | ||
| Red Hat Enterprise Linux 6 | curl | Will not fix | ||
| Red Hat Enterprise Linux 8 | curl | Not affected | ||
| JBoss Core Services Apache HTTP Server 2.4.29 SP2 | jbcs-httpd24-curl | Fixed | RHSA-2019:1543 | 18.06.2019 |
| Red Hat Enterprise Linux 7 | curl | Fixed | RHSA-2018:3157 | 30.10.2018 |
Показывать по
Дополнительная информация
Статус:
5.4 Medium
CVSS3
Связанные уязвимости
A buffer overflow exists in curl 7.12.3 to and including curl 7.58.0 in the FTP URL handling that allows an attacker to cause a denial of service or worse.
A buffer overflow exists in curl 7.12.3 to and including curl 7.58.0 in the FTP URL handling that allows an attacker to cause a denial of service or worse.
A buffer overflow exists in curl 7.12.3 to and including curl 7.58.0 i ...
curl FTP path confusion leads to NIL byte out of bounds write
Уязвимость программного средства для взаимодействия с серверами curl, связанная с записью данных за границами буфера, позволяющая нарушителю вызвать отказ в обслуживании
5.4 Medium
CVSS3