When asking to get a file from a file:// URL, libcurl provides a feature that outputs meta-data about the file using HTTP-like headers. The code doing this would send the wrong buffer to the user (stdout or the application's provide callback), which could lead to other private data from the heap to get inadvertently displayed. The wrong buffer was an uninitialized memory area allocated on the heap and if it turned out to not contain any zero byte, it would continue and display the data following that buffer in memory.
CVSS Details
- CVSS 3.0 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade curl | Oct 4, 2017 | Oct 4, 2017 |
| Amazon_linux | — | Upgrade curl | Dec 20, 2017 | Aug 31, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 4, 2017 |
| Freebsd | — | Upgrade curl | Dec 10, 2025 | Aug 9, 2017 |
| Gentoo Linux | — | Upgrade net-misc/curl. | Oct 30, 2017 | Oct 4, 2017 |
| Oracle Solaris | — | Upgrade web/curl to version 7.59.0-0.175.3.33.0.3.0 on Solaris 11.3 | Jun 18, 2018 | Oct 4, 2017 |
| Suse | — | Upgrade libcurl4Upgrade curlUpgrade libcurl-develUpgrade libcurl4-32bit | May 20, 2018 | Oct 4, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 4, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub