Описание
Curl versions 7.14.1 through 7.61.1 are vulnerable to a heap-based buffer over-read in the tool_msgs.c:voutf() function that may result in information exposure and denial of service.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 7.58.0-2ubuntu3.5 |
| cosmic | released | 7.61.0-1ubuntu2.2 |
| devel | released | 7.61.0-1ubuntu2.2 |
| esm-infra-legacy/trusty | released | 7.35.0-1ubuntu2.19 |
| esm-infra/bionic | released | 7.58.0-2ubuntu3.5 |
| esm-infra/xenial | released | 7.47.0-1ubuntu2.11 |
| precise/esm | not-affected | 7.22.0-3ubuntu4.24 |
| trusty | released | 7.35.0-1ubuntu2.19 |
| trusty/esm | released | 7.35.0-1ubuntu2.19 |
| upstream | pending | 7.62.0 |
Показывать по
EPSS
6.4 Medium
CVSS2
4.4 Medium
CVSS3
Связанные уязвимости
Curl versions 7.14.1 through 7.61.1 are vulnerable to a heap-based buffer over-read in the tool_msgs.c:voutf() function that may result in information exposure and denial of service.
Curl versions 7.14.1 through 7.61.1 are vulnerable to a heap-based buffer over-read in the tool_msgs.c:voutf() function that may result in information exposure and denial of service.
Curl versions 7.14.1 through 7.61.1 are vulnerable to a heap-based buf ...
Curl versions 7.14.1 through 7.61.1 are vulnerable to a heap-based buffer over-read in the tool_msgs.c:voutf() function that may result in information exposure and denial of service.
EPSS
6.4 Medium
CVSS2
4.4 Medium
CVSS3