Rapid7

vulnerability

Amazon Linux AMI 2: CVE-2018-1000121: Security patch for curl, nss-pem (Multiple Advisories)

Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:P)
Published
Mar 14, 2018
Added
Apr 27, 2020
Modified
May 20, 2026

Description

A NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code that allows an attacker to cause a denial of service

Solutions

amazon-linux-ami-2-upgrade-curlamazon-linux-ami-2-upgrade-curl-debuginfoamazon-linux-ami-2-upgrade-libcurlamazon-linux-ami-2-upgrade-libcurl-develamazon-linux-ami-2-upgrade-nss-pemamazon-linux-ami-2-upgrade-nss-pem-debuginfo
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.