Buffer over-read in libcurl - CVE-2017-1000257

Vulnerability identifier: #VU8917

CSH Severity: Low

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-1000257

CWE-ID: CWE-126

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to obtain potentially sensitive information or cause DoS condition on the target system.

The weakness exists due to buffer overread in the IMAP handle. A remote attacker can return a specially crafted IMAP FETCH response, obtain potentially sensitive information from memory on the target system or cause the target application using libcurl to crash.

libcurl
Gentoo Linux
Amazon Linux AMI
Debian Linux
Arch Linux
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux EUS Compute Node
Red Hat Enterprise Linux for Power
Slackware Linux
Ubuntu
Fedora
curl (Alpine package)
curl

Update to version 7.56.1.

curl (Alpine package) - update to 7.55.0-r2
curl - addressed in versions 7.53.1-12.fc26, 7.55.1-7.fc27

• https://curl.haxx.se/docs/adv_20171023.html

• Information disclosure in libcurl
• Slackware Linux update for curl
• Ubuntu update for curl
• Debian update for curl
• Arch Linux update for curl
• Arch Linux update for lib32-curl
• Arch Linux update for lib32-libcurl-compat
• Arch Linux update for lib32-libcurl-gnutls
• Arch Linux update for libcurl-compat
• Arch Linux update for libcurl-gnutls
• Amazon Linux AMI update for curl
• Gentoo update for cURL
• Red Hat update for curl
• Buffer over-read in curl (Alpine package)
• Fedora 27 update for curl
• Fedora 26 update for curl