Curl versions 7.14.1 through 7.61.1 are vulnerable to a heap-based buffer over-read in the tool_msgs.c:voutf() function that may result in information exposure and denial of service.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.0 Base Score: 4.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade curl | Nov 9, 2018 | Oct 31, 2018 |
| Amazon Linux Ami 2 | — | Upgrade libcurl-develUpgrade libcurlUpgrade curlUpgrade curl-debuginfo | Apr 27, 2020 | Oct 31, 2018 |
| Amazon_linux | — | Upgrade curl | Jan 25, 2019 | Oct 31, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 31, 2018 |
| Centos_linux | — | Upgrade libcurl-develUpgrade curlUpgrade curl-debuginfoUpgrade libcurl | Aug 28, 2019 | Oct 31, 2018 |
| Debian | — | Upgrade curl | Nov 4, 2018 | Oct 31, 2018 |
| Freebsd | — | Upgrade curl | Nov 2, 2018 | Nov 1, 2018 |
| Gentoo Linux | — | Upgrade net-misc/curl. | Mar 11, 2019 | Oct 31, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade curlUpgrade libcurlUpgrade libcurl-devel | Dec 4, 2019 | Oct 31, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libcurlUpgrade curlUpgrade libcurl-devel | Sep 25, 2019 | Oct 31, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libcurl-develUpgrade curlUpgrade libcurl | Jun 27, 2019 | Oct 31, 2018 |
| Oracle Solaris | — | Upgrade web/curl to version 7.62.0-11.4.4.0.1.3.0 on Solaris 11.4 | Dec 17, 2018 | Oct 31, 2018 |
| Oracle_linux | — | Upgrade curlUpgrade libcurl-develUpgrade libcurl | Jul 21, 2020 | Oct 31, 2018 |
| Redhat_linux | — | Upgrade curlUpgrade libcurl-develNo solution existsUpgrade curl-debuginfoUpgrade libcurl | Aug 7, 2019 | Oct 31, 2018 |
| Suse | — | Upgrade libcurl-develUpgrade curl-miniUpgrade libcurl4-32bitUpgrade libcurl4-openssl1-x86Upgrade curlUpgrade libcurl4-miniUpgrade libcurl4-openssl1Upgrade libcurl-devel-32bitUpgrade libcurl4-x86Upgrade libcurl4-openssl1-32bitUpgrade libcurl4Upgrade libcurl-mini-develUpgrade curl-openssl1 | Nov 3, 2018 | Oct 31, 2018 |
| Ubuntu | — | Upgrade libcurl3-nssUpgrade libcurl4Upgrade libcurl3-gnutlsUpgrade libcurl3Upgrade curl | Nov 9, 2018 | Oct 31, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 31, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub