Heap-based buffer overflow in libcurl - CVE-2018-16842

Vulnerability identifier: #VU15673

CSH Severity: Low

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-16842

CWE-ID: CWE-122

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The vulnerability exists due to heap-based buffer over-read in the tool_msgs.c:voutf() function. A remote unauthenticated attacker can specially crafted data, trigger memory corruption to read back out-of-buffer data and cause the service to crash.

libcurl
Gentoo Linux
Amazon Linux AMI
Arch Linux
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Server
Slackware Linux
Opensuse
Fedora
Modular Switchgear Monitoring (MSM)
Flex System Chassis Management Module (CMM)
curl (Alpine package)
curl (Debian package)
curl
Dynamic System Analysis (DSA) Preboot
Secured Component Verification (SCV)
Watson Studio on Cloud Pak for Data
IBM Cloud Transformation Advisor
Dell EMC Unisphere Central

Update to version 7.62.0.

libcurl - update to 7.62.0
curl (Debian package) - update to 7.52.1-5+deb9u8
curl (Alpine package) - addressed in versions 7.61.1-r1, 7.62.0-r0
Dynamic System Analysis (DSA) Preboot - update to dsyte2z-9.65
Secured Component Verification (SCV) - update to 1.92.0
Flex System Chassis Management Module (CMM) - update to 2pet18a-2.5.14a
IBM Cloud Transformation Advisor - update to 3.10.0
Dell EMC Unisphere Central - update to 4.0.8.23220
Watson Studio on Cloud Pak for Data - addressed in versions 4.8.7, 5.1.0
curl - addressed in versions 7.59.0-8.fc28, 7.59.0-9.fc28, 7.61.1-4.fc29, 7.61.1-5.fc29

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16842

• Multiple vulnerabilities in libcurl
• Slackware Linux update for curl
• Debian update for curl
• Arch Linux update for curl
• Arch Linux update for libcurl-compat
• Arch Linux update for libcurl-gnutls
• OpenSUSE Linux update for curl
• OpenSUSE Linux update for curl
• Amazon Linux AMI update for curl
• Gentoo update for cURL
• Red Hat update for curl
• Heap-based buffer overflow in curl (Alpine package)
• Multiple vulnerabilities in Hitachi Energy MSM Product
• Multiple vulnerabilities in Dell EMC Unisphere Central
• Multiple vulnerabilities in Dell Secured Component Verification (SCV)
• Multiple vulnerabilities in IBM Cloud Transformation Advisor
• Multiple vulnerabilities in IBM Flex System Chassis Management Module (CMM)
• Multiple vulnerabilities in IBM Dynamic System Analysis (DSA) Preboot
• Multiple vulnerabilities in IBM Watson Studio on Cloud Pak for Data
• Fedora 28 update for curl
• Fedora 29 update for curl
• Fedora 28 update for curl
• Fedora 29 update for curl