Curl versions 7.14.1 through 7.61.1 are vulnerable to a heap-based buffer over-read in the tool_msgs.c:voutf() function that may result in information exposure and denial of service.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.0 Base Score: 4.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade curl | Nov 9, 2018 | Oct 31, 2018 |
| Amazon Linux Ami 2 | — | Upgrade libcurlUpgrade curlUpgrade libcurl-develUpgrade curl-debuginfo | Apr 27, 2020 | Oct 31, 2018 |
| Amazon_linux | — | Upgrade curl | Jan 25, 2019 | Oct 31, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 31, 2018 |
| Centos_linux | — | Upgrade libcurl-develUpgrade curlUpgrade curl-debuginfoUpgrade libcurl | Aug 28, 2019 | Oct 31, 2018 |
| Debian | — | Upgrade curl | Nov 4, 2018 | Oct 31, 2018 |
| Freebsd | — | Upgrade curl | Nov 2, 2018 | Nov 1, 2018 |
| Gentoo Linux | — | Upgrade net-misc/curl. | Mar 11, 2019 | Oct 31, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade curlUpgrade libcurl-develUpgrade libcurl | Dec 4, 2019 | Oct 31, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libcurl-develUpgrade curlUpgrade libcurl | Sep 25, 2019 | Oct 31, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade curlUpgrade libcurl-develUpgrade libcurl | Jun 27, 2019 | Oct 31, 2018 |
| Oracle Solaris | — | Upgrade web/curl to version 7.62.0-11.4.4.0.1.3.0 on Solaris 11.4 | Dec 17, 2018 | Oct 31, 2018 |
| Oracle_linux | — | Upgrade curlUpgrade libcurl-develUpgrade libcurl | Jul 21, 2020 | Oct 31, 2018 |
| Redhat_linux | — | Upgrade curlUpgrade libcurl-develUpgrade libcurlUpgrade curl-debuginfoNo solution exists | Aug 7, 2019 | Oct 31, 2018 |
| Suse | — | Upgrade libcurl4-openssl1-x86Upgrade curl-miniUpgrade libcurl4-32bitUpgrade libcurl4-openssl1Upgrade libcurl-devel-32bitUpgrade libcurl4-miniUpgrade curlUpgrade libcurl-develUpgrade libcurl-mini-develUpgrade libcurl4-x86Upgrade libcurl4-openssl1-32bitUpgrade curl-openssl1Upgrade libcurl4 | Nov 3, 2018 | Oct 31, 2018 |
| Ubuntu | — | Upgrade libcurl3Upgrade curlUpgrade libcurl3-nssUpgrade libcurl3-gnutlsUpgrade libcurl4 | Nov 9, 2018 | Oct 31, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 31, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub