Поиск уязвимостей
Количество 12
Количество 12
GHSA-xfmx-53v5-938g
The URL percent-encoding decode function in libcurl before 7.51.0 is called `curl_easy_unescape`. Internally, even if this function would be made to allocate a unscape destination buffer larger than 2GB, it would return that new length in a signed 32 bit integer variable, thus the length would get either just truncated or both truncated and turned negative. That could then lead to libcurl writing outside of its heap based buffer.
CVE-2016-8622
The URL percent-encoding decode function in libcurl before 7.51.0 is called `curl_easy_unescape`. Internally, even if this function would be made to allocate a unscape destination buffer larger than 2GB, it would return that new length in a signed 32 bit integer variable, thus the length would get either just truncated or both truncated and turned negative. That could then lead to libcurl writing outside of its heap based buffer.
CVE-2016-8622
The URL percent-encoding decode function in libcurl before 7.51.0 is called `curl_easy_unescape`. Internally, even if this function would be made to allocate a unscape destination buffer larger than 2GB, it would return that new length in a signed 32 bit integer variable, thus the length would get either just truncated or both truncated and turned negative. That could then lead to libcurl writing outside of its heap based buffer.
CVE-2016-8622
The URL percent-encoding decode function in libcurl before 7.51.0 is called `curl_easy_unescape`. Internally, even if this function would be made to allocate a unscape destination buffer larger than 2GB, it would return that new length in a signed 32 bit integer variable, thus the length would get either just truncated or both truncated and turned negative. That could then lead to libcurl writing outside of its heap based buffer.
CVE-2016-8622
The URL percent-encoding decode function in libcurl before 7.51.0 is c ...
openSUSE-SU-2016:2768-1
Security update for curl
SUSE-SU-2016:2714-1
Security update for curl
SUSE-SU-2016:2699-1
Security update for curl
ELSA-2019-4652
ELSA-2019-4652: curl security update (IMPORTANT)
ALT-PU-2016-2231
ALT-PU-2016-2231: package `curl` update to version 7.51.0-alt1
SUSE-SU-2017:2699-1
Security update for SLES 12 Docker image
SUSE-SU-2017:2700-1
Security update for SLES 12-SP1 Docker image
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-xfmx-53v5-938g The URL percent-encoding decode function in libcurl before 7.51.0 is called `curl_easy_unescape`. Internally, even if this function would be made to allocate a unscape destination buffer larger than 2GB, it would return that new length in a signed 32 bit integer variable, thus the length would get either just truncated or both truncated and turned negative. That could then lead to libcurl writing outside of its heap based buffer. | CVSS3: 9.8 | 5% Низкий | больше 4 лет назад |
 | CVE-2016-8622 The URL percent-encoding decode function in libcurl before 7.51.0 is called `curl_easy_unescape`. Internally, even if this function would be made to allocate a unscape destination buffer larger than 2GB, it would return that new length in a signed 32 bit integer variable, thus the length would get either just truncated or both truncated and turned negative. That could then lead to libcurl writing outside of its heap based buffer. | CVSS3: 9.8 | 5% Низкий | больше 8 лет назад |
 | CVE-2016-8622 The URL percent-encoding decode function in libcurl before 7.51.0 is called `curl_easy_unescape`. Internally, even if this function would be made to allocate a unscape destination buffer larger than 2GB, it would return that new length in a signed 32 bit integer variable, thus the length would get either just truncated or both truncated and turned negative. That could then lead to libcurl writing outside of its heap based buffer. | CVSS3: 3.7 | 5% Низкий | около 10 лет назад |
 | CVE-2016-8622 The URL percent-encoding decode function in libcurl before 7.51.0 is called `curl_easy_unescape`. Internally, even if this function would be made to allocate a unscape destination buffer larger than 2GB, it would return that new length in a signed 32 bit integer variable, thus the length would get either just truncated or both truncated and turned negative. That could then lead to libcurl writing outside of its heap based buffer. | CVSS3: 9.8 | 5% Низкий | больше 8 лет назад |
| CVE-2016-8622 The URL percent-encoding decode function in libcurl before 7.51.0 is c ... | CVSS3: 9.8 | 5% Низкий | больше 8 лет назад |
 | openSUSE-SU-2016:2768-1 Security update for curl | почти 10 лет назад | ||
| SUSE-SU-2016:2714-1 Security update for curl | около 10 лет назад | ||
| SUSE-SU-2016:2699-1 Security update for curl | около 10 лет назад | ||
| ELSA-2019-4652 ELSA-2019-4652: curl security update (IMPORTANT) | больше 7 лет назад | ||
| ALT-PU-2016-2231 ALT-PU-2016-2231: package `curl` update to version 7.51.0-alt1 | CVSS3: 9.8 | около 10 лет назад | |
| SUSE-SU-2017:2699-1 Security update for SLES 12 Docker image | около 9 лет назад | ||
| SUSE-SU-2017:2700-1 Security update for SLES 12-SP1 Docker image | около 9 лет назад |
Уязвимостей на страницу