CVE-2018-1000300

curl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer Overflow vulnerability in denial of service and more that can result in curl might overflow a heap based memory buffer when closing down an FTP connection with very long server command replies.. This vulnerability appears to have been fixed in curl < 7.54.1 and curl >= 7.60.0.

Database specific

{
    "unresolved_ranges":  [
        {
            "cpes":  [
                "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
                "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
                "cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",
                "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*"
            ],
            "extracted_events":  [
                {
                    "introduced":  "14.04"
                },
                {
                    "last_affected":  "14.04"
                },
                {
                    "introduced":  "16.04"
                },
                {
                    "last_affected":  "16.04"
                },
                {
                    "introduced":  "17.10"
                },
                {
                    "last_affected":  "17.10"
                },
                {
                    "introduced":  "18.04"
                },
                {
                    "last_affected":  "18.04"
                }
            ],
            "source":  "CPE_STRING",
            "vendor_product":  "canonical:ubuntu_linux"
        }
    ]
}

References

Affected packages

Git / github.com/curl/curl

Affected ranges

Type

GIT

Repo

https://github.com/curl/curl

Events

Introduced

54b636f14546d3fde9f9c67c3b32701d78563161

Last Affected

4d6bd91ab33328c6d27eddc32e064defc02dc4fd

Database specific

Show details

{
    "cpe":  "cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*",
    "extracted_events":  [
        {
            "introduced":  "7.54.1"
        },
        {
            "last_affected":  "7.59.0"
        }
    ],
    "source":  "CPE_RANGE"
}

Affected versions

Other

curl-7_54_1

curl-7_55_0

curl-7_55_1

curl-7_56_0

curl-7_56_1

curl-7_57_0

curl-7_58_0

curl-7_59_0

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-1000300.json"