Out-of-bounds read in cURL - CVE-2016-8620

Vulnerability identifier: #VU33019

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2016-8620

CWE-ID: CWE-125

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

The 'globbing' feature in curl before version 7.51.0 has a flaw that leads to integer overflow and out-of-bounds read via user controlled input.

cURL
Amazon Linux AMI
Arch Linux
SUSE Linux
Slackware Linux
Fedora
Opensuse
curl (Alpine package)
curl
Dell EMC Unisphere Central

Install update from vendor's website.

cURL - update to 7.51.0
curl (Alpine package) - addressed in versions 7.49.1-r4, 7.51.0-r0
Dell EMC Unisphere Central - update to 4.0.8.23220
curl - addressed in versions 7.47.1-9.fc24, 7.51.0-1.fc25

• http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
• http://www.securityfocus.com/bid/94102
• http://www.securitytracker.com/id/1037192
• https://access.redhat.com/errata/RHSA-2018:3558
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8620
• https://curl.haxx.se/docs/adv_20161102F.html
• https://security.gentoo.org/glsa/201701-47
• https://www.tenable.com/security/tns-2016-21

• Out-of-bounds read in curl.haxx.se cURL
• OpenSUSE Linux update for curl
• SUSE Linux update for curl
• SUSE Linux update for curl
• Out-of-bounds read in curl (Alpine package)
• Arch Linux update for curl
• Amazon Linux AMI update for curl
• Slackware Linux update for curl
• Multiple vulnerabilities in Dell EMC Unisphere Central
• Fedora 24 update for curl
• Fedora 25 update for curl