critical9.8
CVE-2017-8818
curl and libcurl before 7.57.0 on 32-bit platforms allow attackers to cause a denial of service (out-of-bounds access and application crash) or possibly have u…
Impact
curl and libcurl before 7.57.0 on 32-bit platforms allow attackers to cause a denial of service (out-of-bounds access and application crash) or possibly have unspecified other impact because too little memory is allocated for interfacing to an SSL library.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Haxx | Curl | Versions 7.56.0, 7.56.1 |
| Haxx | Libcurl | Versions 7.56.0, 7.56.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://security.cucumberlinux.com/security/details.php?id=163
- http://www.securityfocus.com/bid/102014
- http://www.securitytracker.com/id/1039898
- https://curl.haxx.se/docs/adv_2017-af0a.html
- https://security.gentoo.org/glsa/201712-04
- http://security.cucumberlinux.com/security/details.php?id=163
- http://www.securityfocus.com/bid/102014
- http://www.securitytracker.com/id/1039898
- https://curl.haxx.se/docs/adv_2017-af0a.html
- https://security.gentoo.org/glsa/201712-04