Double Free in cURL - CVE-2016-8619

Vulnerability identifier: #VU33018

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2016-8619

CWE-ID: CWE-415

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

The function `read_data()` in security.c in curl before version 7.51.0 is vulnerable to memory double free.

cURL
Amazon Linux AMI
Arch Linux
SUSE Linux
Slackware Linux
Fedora
Opensuse
Modular Switchgear Monitoring (MSM)
curl (Alpine package)
curl
Dell EMC Unisphere Central

Install update from vendor's website.

cURL - update to 7.51.0
curl (Alpine package) - addressed in versions 7.49.1-r4, 7.51.0-r0
Dell EMC Unisphere Central - update to 4.0.8.23220
curl - addressed in versions 7.47.1-9.fc24, 7.51.0-1.fc25

• http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
• http://www.securityfocus.com/bid/94100
• http://www.securitytracker.com/id/1037192
• https://access.redhat.com/errata/RHSA-2018:2486
• https://access.redhat.com/errata/RHSA-2018:3558
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8619
• https://curl.haxx.se/CVE-2016-8619.patch
• https://curl.haxx.se/docs/adv_20161102E.html
• https://security.gentoo.org/glsa/201701-47
• https://www.tenable.com/security/tns-2016-21

• Double Free in curl.haxx.se cURL
• OpenSUSE Linux update for curl
• SUSE Linux update for curl
• SUSE Linux update for curl
• Double Free in curl (Alpine package)
• Arch Linux update for lib32-libcurl-gnutls
• Arch Linux update for libcurl-gnutls
• Arch Linux update for libcurl-compat
• Arch Linux update for curl
• Arch Linux update for lib32-libcurl-compat
• Arch Linux update for lib32-curl
• Amazon Linux AMI update for curl
• Slackware Linux update for curl
• Multiple vulnerabilities in Hitachi Energy MSM Product
• Multiple vulnerabilities in Dell EMC Unisphere Central
• Fedora 24 update for curl
• Fedora 25 update for curl