CVE-2018-1000301
curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded RTSP…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (6.04%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded RTSP content.. This vulnerability appears to have been fixed in curl < 7.20.0 and curl >= 7.60.0.
- CVSS 3.1
- 9.1 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
- EPSS
- 6.04% probability · 93th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-125
- Affected
- debian/debian linux · canonical/ubuntu linux · haxx/curl · redhat/enterprise linux desktop · redhat/enterprise linux server · redhat/enterprise linux workstation · oracle/communications webrtc session controller · oracle/enterprise manager ops center · oracle/peoplesoft enterprise peopletools
- Source
- cve@mitre.org
References
- http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.htmlPatch
- http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.htmlPatch
- http://www.securityfocus.com/bid/104225Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1040931Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHBA-2019:0327Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:3157Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:3558Third Party Advisory
- https://access.redhat.com/errata/RHSA-2020:0544
- https://access.redhat.com/errata/RHSA-2020:0594
- https://curl.haxx.se/docs/adv_2018-b138.htmlPatch, Vendor Advisory
- https://lists.debian.org/debian-lts-announce/2018/05/msg00010.htmlMailing List, Third Party Advisory
- https://security.gentoo.org/glsa/201806-05Third Party Advisory
- https://usn.ubuntu.com/3598-2/Third Party Advisory
- https://usn.ubuntu.com/3648-1/Third Party Advisory
- https://www.debian.org/security/2018/dsa-4202Third Party Advisory
- https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.htmlPatch, Third Party Advisory
- https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
- http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.htmlPatch
- http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.htmlPatch
- http://www.securityfocus.com/bid/104225Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1040931Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHBA-2019:0327Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:3157Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:3558Third Party Advisory
- https://access.redhat.com/errata/RHSA-2020:0544
- https://access.redhat.com/errata/RHSA-2020:0594
- https://curl.haxx.se/docs/adv_2018-b138.htmlPatch, Vendor Advisory
- https://lists.debian.org/debian-lts-announce/2018/05/msg00010.htmlMailing List, Third Party Advisory
- https://security.gentoo.org/glsa/201806-05Third Party Advisory
- https://usn.ubuntu.com/3598-2/Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.