NetSight
IP …
medium6.4

CVE-2015-3237

The smb_request_state function in cURL and libcurl 7.40.0 through 7.42.1 allows remote SMB servers to obtain sensitive information from memory or cause a denia…

Impact

The smb_request_state function in cURL and libcurl 7.40.0 through 7.42.1 allows remote SMB servers to obtain sensitive information from memory or cause a denial of service (out-of-bounds read and crash) via crafted length and offset values.

Affected products

VendorProductAffected versions
HaxxCurl
Versions 7.40.0, 7.41.0, 7.42.0, 7.42.1
HaxxLibcurl
Versions 7.40.0, 7.41.0, 7.42.0, 7.42.1
HpSystem Management Homepage
through 7.5.3.1
OracleEnterprise Manager Ops Center
Versions 12.1.4, 12.2.2, 12.3.2
OracleGlassfish Server
Versions 3.0.1, 3.1.2

Weakness classification

CWE-20

References