Heap-based buffer overflow in cURL - CVE-2018-0500

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU13841

Heap-based buffer overflow in cURL - CVE-2018-0500

Published: July 12, 2018 / Updated: July 12, 2018


Vulnerability identifier: #VU13841
CSH Severity: High
CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-0500
CWE-ID: CWE-122
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists in curl_smtp_escape_eob in lib/smtp.c due to heap-based buffer overflow when a system invokes curl to send data via SMTP and uses a reduced read buffer. A remote unauthenticated attacker can trigger memory corruption and cause the service to crash or execute arbitrary data with elevated privileges.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


Affected software

cURL
Arch Linux
Gentoo Linux
Amazon Linux AMI
Slackware Linux
Opensuse
Fedora
curl (Alpine package)
curl
Secured Component Verification (SCV)

How to mitigate CVE-2018-0500

Update to version 7.61.0.

cURL - update to 7.61.0
curl (Alpine package) - update to 7.61.0-r0
Secured Component Verification (SCV) - update to 1.92.0
curl - update to 7.59.0-5.fc28

External References

Related Security Bulletins