CVE-2017-8818

curl and libcurl before 7.57.0 on 32-bit platforms allow attackers to cause a denial of service (out-of-bounds access and application crash) or possibly have unspecified other impact because too little memory is allocated for interfacing to an SSL library.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
debianCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 71%
VendorProductVersion
haxxcurl
7.56.0
haxxcurl
7.56.1
haxxlibcurl
7.56.0
haxxlibcurl
7.56.1
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
curl
bullseye
7.74.0-1.3+deb11u13
fixed
stretch
not-affected
jessie
not-affected
wheezy
not-affected
bullseye (security)
7.74.0-1.3+deb11u11
fixed
bookworm
7.88.1-10+deb12u7
fixed
bookworm (security)
7.88.1-10+deb12u5
fixed
sid
8.10.1-2
fixed
trixie
8.10.1-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
curl
artful
not-affected
zesty
not-affected
xenial
not-affected
trusty
not-affected
Common Weakness Enumeration
References
http://security.cucumberlinux.com/security/details.php?id=163
http://www.securityfocus.com/bid/102014
http://www.securitytracker.com/id/1039898
https://curl.haxx.se/docs/adv_2017-af0a.html
https://security.gentoo.org/glsa/201712-04
http://security.cucumberlinux.com/security/details.php?id=163
http://www.securityfocus.com/bid/102014
http://www.securitytracker.com/id/1039898
https://curl.haxx.se/docs/adv_2017-af0a.html
https://security.gentoo.org/glsa/201712-04