Buffer overflow in cURL - CVE-2017-7407
Published: April 3, 2017 / Updated: August 3, 2020
Vulnerability identifier: #VU33154
CSH Severity: Low
CVSS v4: 2.4 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2017-7407
CWE-ID: CWE-119
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local non-authenticated attacker to gain access to sensitive information.
The ourWriteOut function in tool_writeout.c in curl 7.53.1 might allow physically proximate attackers to obtain sensitive information from process memory in opportunistic circumstances by reading a workstation screen during use of a --write-out argument ending in a '%' character, which leads to a heap-based buffer over-read.
Affected software
cURL
Amazon Linux AMI
Gentoo Linux
Fedora
curl (Alpine package)
curl
Dell EMC Unisphere Central
Amazon Linux AMI
Gentoo Linux
Fedora
curl (Alpine package)
curl
Dell EMC Unisphere Central
How to mitigate CVE-2017-7407
Install update from vendor's website.
cURL - update to 7.54.0
curl (Alpine package) - addressed in versions 7.52.1-r1, 7.52.1-r2
Dell EMC Unisphere Central - update to 4.0.8.23220
curl - addressed in versions 7.51.0-6.fc25, 7.53.1-4.fc26
curl (Alpine package) - addressed in versions 7.52.1-r1, 7.52.1-r2
Dell EMC Unisphere Central - update to 4.0.8.23220
curl - addressed in versions 7.51.0-6.fc25, 7.53.1-4.fc26