cURL - Multiple Vulnerabilities
Summary
DLA-1309-1: curl - security update. Affects curl versions < 7.26.0-1+wheezy25. Fixed in 7.26.0-1+wheezy25. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
cURL is an URL transfer library that allows applications to perform various network operations, such as sending and receiving data over HTTP, FTP, and other protocols. It is widely used in many software applications and provides a convenient way to interact with remote servers. However, multiple vulnerabilities have been discovered in cURL that could potentially be exploited by attackers to cause various issues.
Vulnerability Detail
Three vulnerabilities have been identified in cURL:
-
CVE-2018-1000120: This vulnerability allows an attacker to write a zero byte out of bounds when cURL is working on an FTP URL with the setting to issue a single CWD command. It can be triggered if the directory part of the URL contains a "%00" sequence.
-
CVE-2018-1000121: This vulnerability can lead to a crash in applications that rely on libcurl for LDAP URL handling. A malicious server can send a specially crafted response that causes cURL to dereference a near-NULL address.
-
CVE-2018-1000122: This vulnerability allows an attacker to trick cURL into copying data beyond the end of its heap-based buffer when transferring an RTSP URL. This can result in information leakage or a denial of service.
How To Fix
Minimum fixed version
7.26.0-1+wheezy25
This is the first release that contains the fix.
sudo apt-get install --only-upgrade curlTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There are no known workarounds for these vulnerabilities. It is essential to apply the recommended fix by upgrading cURL to the latest version.
Conclusion
Multiple vulnerabilities have been discovered in cURL that can lead to various issues, including information leakage, denial of service, and potential crashes. It is crucial to upgrade your cURL packages to the latest version to mitigate these vulnerabilities. If you need further assistance or support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for curl →
FAQ
cURL is an URL transfer library that allows applications to perform various network operations, such as sending and receiving data over HTTP, FTP, and other protocols.
These vulnerabilities can lead to various issues, including information leakage, denial of service, and potential crashes in applications relying on libcurl for LDAP URL handling.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by these vulnerabilities. Simply upload your manifest file, such as package-lock.json, and Vulert will analyze it in real-time.
No, there are no known workarounds for these vulnerabilities. It is crucial to apply the recommended fix by upgrading cURL to the latest version.
You can find more information about these vulnerabilities in the Debian LTS security advisories, specifically DLA-1309-1. Visit https://wiki.debian.org/LTS for further details.
Related vulnerabilities
Recent vulnerabilities recorded for curl.
