Information disclosure in libcurl - CVE-2018-1000007

Vulnerability identifier: #VU10224

CSH Severity: Low

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-1000007

CWE-ID: CWE-200

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to obtain potentially sensitive information on the target system.

The weakness exists due to insufficient validation of user-supplied input. A remote attacker can send custom headers in an HTTP request and an HTTP 30X redirect response code, cause the application to send the custom headers to the server specified in the 'Location:' response header and  obtain potentially sensitive authentication information from applications that use custom 'Authorization:' headers.

libcurl
Gentoo Linux
Amazon Linux AMI
Debian Linux
Arch Linux
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux EUS Compute Node
Red Hat Enterprise Linux for Power
Ubuntu
Slackware Linux
Fedora
watsonx.data
Flex System Chassis Management Module (CMM)
QLogic Virtual Fabric Extension Module for IBM BladeCenter
Dell EMC Unisphere Central
curl

Update to version 7.58.0.

watsonx.data - update to 2.2
Flex System Chassis Management Module (CMM) - update to 2pet16c-2.5.12c
Dell EMC Unisphere Central - update to 4.0.8.23220
curl - addressed in versions 7.53.1-14.fc26, 7.55.1-9.fc27
QLogic Virtual Fabric Extension Module for IBM BladeCenter - update to 9.0.3.23.00

• https://curl.haxx.se/docs/adv_2018-b3bf.html

• Multiple vulnerabilities in libcurl
• Slackware Linux update for curl
• Debian update for curl
• Arch Linux update for curl
• Arch Linux update for lib32-curl
• Arch Linux update for libcurl-compat
• Arch Linux update for libcurl-gnutls
• Arch Linux update for lib32-libcurl-gnutls
• Arch Linux update for lib32-libcurl-compat
• Ubuntu update for curl
• Ubuntu update for curl
• Amazon Linux AMI update for curl
• Gentoo update for cURL
• Red Hat update for curl and nss-pem
• Red Hat update for curl
• Red Hat Enterprise Linux Server 7.4 update for curl
• Multiple vulnerabilities in Dell EMC Unisphere Central
• Multiple vulnerabilities in Qlogic Virtual Fabric Extension Module for IBM BladeCenter Firmware Update
• IBM Flex System Chassis Management Module (CMM) update for cURL liburl
• Fedora 27 update for curl
• Fedora 26 update for curl
• Multiple vulnerabilities in IBM watsonx.data