Stack-based buffer overflow in the Curl_sasl_create_digest_md5_message function in lib/curl_sasl.c in curl and libcurl 7.26.0 through 7.28.1, when negotiating SASL DIGEST-MD5 authentication, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the realm parameter in a (1) POP3, (2) SMTP or (3) IMAP message.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Curl | — | Upgrade macOS to the latest version | Apr 5, 2017 | Mar 8, 2013 |
| Debian | — | Upgrade curl | Jul 30, 2024 | Mar 8, 2013 |
| Gentoo Linux | — | Upgrade net-misc/curl. | Oct 30, 2017 | Mar 8, 2013 |
| Oracle Solaris | — | Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4 | Oct 19, 2018 | Mar 8, 2013 |
| Suse | — | Upgrade libcurl-develUpgrade curlUpgrade libcurl4-32bitUpgrade libcurl4 | Aug 9, 2024 | Mar 8, 2013 |
| Ubuntu | — | Upgrade libcurl3-nssUpgrade libcurl3Upgrade libcurl3-gnutls | Nov 8, 2024 | Mar 8, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub