NetSight
IP …
critical9.8

CVE-2018-1000120

A buffer overflow exists in curl 7.12.3 to and including curl 7.58.0 in the FTP URL handling that allows an attacker to cause a denial of service or worse.

Impact

A buffer overflow exists in curl 7.12.3 to and including curl 7.58.0 in the FTP URL handling that allows an attacker to cause a denial of service or worse.

Affected products

VendorProductAffected versions
DebianDebian Linux
Versions 7.0, 8.0, 9.0
CanonicalUbuntu Linux
Versions 12.04, 14.04, 16.04, 17.10
HaxxCurl
from 7.12.3 through 7.58.0
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Workstation
Version 7.0
OracleCommunications Webrtc Session Controller
before 7.2
OracleEnterprise Manager Ops Center
Versions 12.2.2, 12.3.3
OraclePeoplesoft Enterprise Peopletools
Versions 8.55, 8.56, 8.57

Weakness classification

CWE-787

References