Heap out-of-bounds read in libcurl - CVE-2019-3823

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU17458

Heap out-of-bounds read in libcurl - CVE-2019-3823

Published: February 11, 2019


Vulnerability identifier: #VU17458
CSH Severity: Low
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2019-3823
CWE-ID: CWE-125
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to gain access to potentially sensitive information or cause the service to crash.

The vulnerability exists due to a heap out-of-bounds read in the code handling the end-of-response for SMTP. If the buffer passed to `smtp_endofresp()` isn't NUL terminated and contains no character ending the parsed number, and `len` is set to 5, then the `strtol()` call reads beyond the allocated buffer. A remote attacker can trigger heap out-of-bounds read error and read contents of memory on the system or cause the service to crash..


Affected software

libcurl
Gentoo Linux
Arch Linux
Red Hat Enterprise Linux for x86_64
Slackware Linux
Opensuse
Fedora
CM 1542-1
EMC Isilon OneFS
curl (Debian package)
curl (Alpine package)
curl
SCALANCE SC-600
Dell EMC Unity VSA Operating Environment (OE)
Dell EMC Unity Operating Environment (OE)

How to mitigate CVE-2019-3823

Update to version 7.64.0.

libcurl - update to 7.64.0
curl (Debian package) - update to 7.52.1-5+deb9u9
curl (Alpine package) - update to 7.61.1-r2
SCALANCE SC-600 - update to 2.0
Dell EMC Unity VSA Operating Environment (OE) - update to 5.0.0.0.5.116
Dell EMC Unity Operating Environment (OE) - update to 5.0.0.0.5.116
curl - update to 7.61.1-8.fc29

External References

Related Security Bulletins