Description
The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denial of service (integer overflow and resultant buffer overflow, and application crash) or possibly have unspecified other impact via vectors involving long user and password fields.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a curl and libcurl before 7.57.0
curl and libcurl before 7.57.0affected
References
- http://security.cucumberlinux.com/security/details.php?id=161 ↗
- https://security.gentoo.org/glsa/201712-04 ↗
- https://access.redhat.com/errata/RHSA-2018:3558 ↗
- https://curl.haxx.se/docs/adv_2017-12e7.html ↗
- http://www.securityfocus.com/bid/101998 ↗
- http://www.securitytracker.com/id/1039896 ↗
- https://www.debian.org/security/2017/dsa-4051 ↗
- http://www.securitytracker.com/id/1040608 ↗