A buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling code that allows an attacker to cause a denial of service or information leakage
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade curl | Mar 21, 2018 | Mar 14, 2018 |
| Amazon Linux Ami 2 | — | Upgrade libcurlUpgrade curlUpgrade nss-pem-debuginfoUpgrade nss-pemUpgrade libcurl-develUpgrade curl-debuginfo | Apr 27, 2020 | Mar 14, 2018 |
| Amazon_linux | — | Upgrade curl | Apr 20, 2018 | Mar 14, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 14, 2018 |
| Centos_linux | — | Upgrade libcurl-develUpgrade libcurlUpgrade nss-pemUpgrade curlUpgrade curl-debuginfoUpgrade nss-pem-debuginfo | Aug 28, 2019 | Mar 14, 2018 |
| Debian | — | Upgrade curl | Mar 17, 2018 | Mar 14, 2018 |
| Gentoo Linux | — | Upgrade net-misc/curl. | Apr 9, 2018 | Mar 14, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade libcurl-develUpgrade libcurlUpgrade curl | May 3, 2018 | Mar 14, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libcurlUpgrade curlUpgrade libcurl-devel | May 3, 2018 | Mar 14, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libcurlUpgrade curlUpgrade libcurl-devel | Jul 3, 2018 | Mar 14, 2018 |
| Oracle Solaris | — | Upgrade web/curl to version 7.59.0-0.175.3.33.0.3.0 on Solaris 11.3Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4 | Jun 18, 2018 | Mar 14, 2018 |
| Oracle_linux | — | Upgrade curlUpgrade nss-pemUpgrade libcurl-develUpgrade libcurl | Nov 6, 2018 | Mar 14, 2018 |
| Redhat_linux | — | Upgrade curlUpgrade libcurl-develUpgrade curl-debuginfoUpgrade nss-pem-debuginfoUpgrade libcurlUpgrade nss-pem | Oct 31, 2018 | Mar 14, 2018 |
| Suse | — | Upgrade libcurl4-openssl1-32bitUpgrade libcurl4Upgrade libcurl4-x86Upgrade curl-openssl1Upgrade libcurl4-openssl1Upgrade libcurl4-32bitUpgrade libcurl4-openssl1-x86Upgrade libcurl-develUpgrade curl | Mar 23, 2018 | Mar 14, 2018 |
| Ubuntu | — | Upgrade libcurl3-gnutlsUpgrade curlUpgrade libcurl3-nssUpgrade libcurl3 | Apr 25, 2018 | Mar 14, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 14, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub