NetSight
IP …
critical9.1

CVE-2018-1000122

A buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling code that allows an attacker to cause a denial of service or inf…

Impact

A buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling code that allows an attacker to cause a denial of service or information leakage

Affected products

VendorProductAffected versions
DebianDebian Linux
Versions 7.0, 8.0, 9.0
CanonicalUbuntu Linux
Versions 12.04, 14.04, 16.04, 17.10
HaxxCurl
from 7.20.0 through 7.58.0
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Workstation
Version 7.0
OracleCommunications Webrtc Session Controller
before 7.2
OracleEnterprise Manager Ops Center
Versions 12.2.2, 12.3.3
OraclePeoplesoft Enterprise Peopletools
Versions 8.55, 8.56, 8.57

Weakness classification

CWE-125

References