Critical Buffer Overflow Vulnerability in curl Package
Summary
ALPINE-CVE-2017-8816: The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denial of service (integer overflow and resultant buffer overflow, and application crash) or possibly have... Affects curl versions < 7.57.0-r0. Fixed in 7.57.0-r0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The curl package is a widely used command-line tool and library for transferring data with URLs. It supports various protocols, including HTTP, HTTPS, FTP, and more. curl is known for its versatility and ease of use, making it a staple in many software applications and scripts. However, a critical vulnerability has been identified in versions prior to 7.57.0, which affects its NTLM authentication feature, particularly on 32-bit platforms.
Vulnerability Detail
The NTLM authentication feature in curl and libcurl before version 7.57.0 is susceptible to an integer overflow that can lead to a buffer overflow and application crash. This vulnerability can be exploited by attackers through long user and password fields, potentially resulting in a denial of service or other unspecified impacts. The severity of this vulnerability is reflected in its CVSS score of 9.8, indicating a critical risk to affected systems.
How To Fix
Minimum fixed version
7.57.0-r0
This is the first release that contains the fix.
sudo apk add --upgrade curlTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can avoid using NTLM authentication or limit the length of user and password fields to prevent exploitation until the package can be updated.
Conclusion
In summary, the vulnerability in the curl package poses a significant risk due to its potential for exploitation through NTLM authentication. Users are strongly advised to update to the latest version to ensure their systems remain secure. Utilizing tools like Vulert can further enhance your security posture by monitoring for vulnerabilities in real-time.
See every vulnerability recorded for curl →
FAQ
The CVSS score of this vulnerability is 9.8, indicating a critical risk.
All versions of curl and libcurl prior to 7.57.0 are affected by this vulnerability.
Failure to update curl may leave your system vulnerable to denial of service attacks and other potential exploits.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
Vulert is a tool that monitors and alerts in real-time for open-source vulnerabilities in software using just a manifest file like package-lock.json.
References
Related vulnerabilities
Recent vulnerabilities recorded for curl.
