Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2018:2423-1

Опубликовано: 17 авг. 2018
Источник: suse-cvrf

Описание

Security update for curl

This update for curl fixes the following issues:

Security issue fixed:

  • CVE-2018-0500: Fix a SMTP send heap buffer overflow (bsc#1099793).

Список пакетов

SUSE Linux Enterprise Module for Basesystem 15
curl-7.60.0-3.6.4
libcurl-devel-7.60.0-3.6.4
libcurl4-7.60.0-3.6.4
libcurl4-32bit-7.60.0-3.6.4

Ссылки

Описание

Curl_smtp_escape_eob in lib/smtp.c in curl 7.54.1 to and including curl 7.60.0 has a heap-based buffer overflow that might be exploitable by an attacker who can control the data that curl transmits over SMTP with certain settings (i.e., use of a nonstandard --limit-rate argument or CURLOPT_BUFFERSIZE value).

Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15:curl-7.60.0-3.6.4
SUSE Linux Enterprise Module for Basesystem 15:libcurl-devel-7.60.0-3.6.4
SUSE Linux Enterprise Module for Basesystem 15:libcurl4-32bit-7.60.0-3.6.4
SUSE Linux Enterprise Module for Basesystem 15:libcurl4-7.60.0-3.6.4
Ссылки