Description (CNA)
curl and libcurl before 7.57.0 on 32-bit platforms allow attackers to cause a denial of service (out-of-bounds access and application crash) or possibly have unspecified other impact because too little memory is allocated for interfacing to an SSL library.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / curl and libcurl before 7.57.0 | affected curl and libcurl before 7.57.0 |
CWE
No CWE identifiers supplied.
References
- https://security.gentoo.org/glsa/201712-04
- https://curl.haxx.se/docs/adv_2017-af0a.html
- http://www.securitytracker.com/id/1039898
- http://security.cucumberlinux.com/security/details.php?id=163
- http://www.securityfocus.com/bid/102014
ADP enrichment
No English description supplied.