vulnerability
Amazon Linux AMI: CVE-2016-8617: Security patch for curl (ALAS-2016-766)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:L/AC:M/Au:S/C:C/I:C/A:C) | 2016-11-02 | 2016-11-11 | 2025-01-28 |
Severity
7
CVSS
(AV:L/AC:M/Au:S/C:C/I:C/A:C)
Published
2016-11-02
Added
2016-11-11
Modified
2025-01-28
Description
The base64 encode function in curl before version 7.51.0 is prone to a buffer being under allocated in 32bit systems if it receives at least 1Gb as input via `CURLOPT_USERNAME`.
Solution
amazon-linux-upgrade-curl
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.