A buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling code that allows an attacker to cause a denial of service or information leakage
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade curl | Mar 21, 2018 | Mar 14, 2018 |
| Amazon Linux Ami 2 | — | Upgrade libcurlUpgrade libcurl-develUpgrade curl-debuginfoUpgrade nss-pemUpgrade curlUpgrade nss-pem-debuginfo | Apr 27, 2020 | Mar 14, 2018 |
| Amazon_linux | — | Upgrade curl | Apr 20, 2018 | Mar 14, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 14, 2018 |
| Centos_linux | — | Upgrade libcurl-develUpgrade libcurlUpgrade curlUpgrade nss-pemUpgrade nss-pem-debuginfoUpgrade curl-debuginfo | Aug 28, 2019 | Mar 14, 2018 |
| Debian | — | Upgrade curl | Mar 17, 2018 | Mar 14, 2018 |
| Gentoo Linux | — | Upgrade net-misc/curl. | Apr 9, 2018 | Mar 14, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade curlUpgrade libcurlUpgrade libcurl-devel | May 3, 2018 | Mar 14, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libcurlUpgrade curlUpgrade libcurl-devel | May 3, 2018 | Mar 14, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libcurlUpgrade curlUpgrade libcurl-devel | Jul 3, 2018 | Mar 14, 2018 |
| Oracle Solaris | — | Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4Upgrade web/curl to version 7.59.0-0.175.3.33.0.3.0 on Solaris 11.3 | Jun 18, 2018 | Mar 14, 2018 |
| Oracle_linux | — | Upgrade libcurlUpgrade curlUpgrade libcurl-develUpgrade nss-pem | Nov 6, 2018 | Mar 14, 2018 |
| Redhat_linux | — | Upgrade libcurl-develUpgrade curlUpgrade libcurlUpgrade curl-debuginfoUpgrade nss-pemUpgrade nss-pem-debuginfo | Oct 31, 2018 | Mar 14, 2018 |
| Suse | — | Upgrade libcurl4-openssl1-32bitUpgrade libcurl4Upgrade libcurl4-x86Upgrade curl-openssl1Upgrade libcurl4-32bitUpgrade libcurl4-openssl1-x86Upgrade libcurl4-openssl1Upgrade libcurl-develUpgrade curl | Mar 23, 2018 | Mar 14, 2018 |
| Ubuntu | — | Upgrade libcurl3-nssUpgrade libcurl3Upgrade curlUpgrade libcurl3-gnutls | Apr 25, 2018 | Mar 14, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 14, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub