Out-of-bounds read in libcurl - CVE-2017-1000254

Vulnerability identifier: #VU8702

CSH Severity: Low

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-1000254

CWE-ID: CWE-125

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The weakness exists due to out-of-bounds read when parsing a directory name when connecting to an FTP server. A remote attacker can trigger memory corruption, access arbitrary files and cause the application to crash.

Successful exploitation of the vulnerability results in denial of service.

libcurl
Arch Linux
Debian Linux
Amazon Linux AMI
Gentoo Linux
macOS
Slackware Linux
Fedora
curl (Alpine package)
curl
Dynamic System Analysis (DSA) Preboot
Dell EMC Unisphere Central

The vulnerability is fixed in version 7.56.0.

curl (Alpine package) - update to 7.55.0-r1
Dynamic System Analysis (DSA) Preboot - update to dsyte2z-9.65
Dell EMC Unisphere Central - update to 4.0.8.23220
curl - addressed in versions 7.53.1-11.fc26, 7.55.1-6.fc27

• https://curl.haxx.se/docs/adv_20171004.html

• Denial of service in libcurl
• Arch Linux update for libcurl-compat
• Arch Linux update for lib32-libcurl-compat
• Arch Linux update for libcurl-gnutls
• Arch Linux update for lib32-libcurl-gnutls
• Arch Linux update for lib32-curl
• Arch Linux update for curl
• Debian update for curl
• Debian update for curl
• Slackware Linux update for curl
• Amazon Linux AMI update for curl
• Multiple vulnerabilities in Apple macOS/OS X
• Gentoo update for cURL
• Out-of-bounds read in curl (Alpine package)
• Multiple vulnerabilities in Dell EMC Unisphere Central
• Multiple vulnerabilities in IBM Dynamic System Analysis (DSA) Preboot
• Fedora 26 update for curl
• Fedora 27 update for curl