Search for packages
Package details: pkg:alpm/archlinux/lib32-libcurl-compat@7.60.0-1
purl pkg:alpm/archlinux/lib32-libcurl-compat@7.60.0-1
Next non-vulnerable version 7.61.0-1
Latest non-vulnerable version 8.4.0-1
Risk 4.4
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-5fs1-75pg-aaah
Aliases:
CVE-2018-0500
Curl_smtp_escape_eob in lib/smtp.c in curl 7.54.1 to and including curl 7.60.0 has a heap-based buffer overflow that might be exploitable by an attacker who can control the data that curl transmits over SMTP with certain settings (i.e., use of a nonstandard --limit-rate argument or CURLOPT_BUFFERSIZE value).
7.61.0-1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-cjbd-4xhr-aaae curl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer Overflow vulnerability in denial of service and more that can result in curl might overflow a heap based memory buffer when closing down an FTP connection with very long server command replies.. This vulnerability appears to have been fixed in curl < 7.54.1 and curl >= 7.60.0. CVE-2018-1000300
VCID-d49w-zdjv-aaas curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded RTSP content.. This vulnerability appears to have been fixed in curl < 7.20.0 and curl >= 7.60.0. CVE-2018-1000301

Date Actor Action Vulnerability Source VulnerableCode Version
2025-03-28T07:46:02.681189+00:00 Arch Linux Importer Affected by VCID-5fs1-75pg-aaah https://security.archlinux.org/AVG-731 36.0.0
2025-03-28T07:44:34.554136+00:00 Arch Linux Importer Fixing VCID-cjbd-4xhr-aaae https://security.archlinux.org/AVG-696 36.0.0
2025-03-28T07:44:34.533030+00:00 Arch Linux Importer Fixing VCID-d49w-zdjv-aaas https://security.archlinux.org/AVG-696 36.0.0
2024-12-11T10:54:17.733460+00:00 Arch Linux Importer Affected by VCID-5fs1-75pg-aaah https://security.archlinux.org/AVG-731 35.0.0
2024-12-11T10:54:07.040548+00:00 Arch Linux Importer Fixing VCID-cjbd-4xhr-aaae https://security.archlinux.org/AVG-696 35.0.0
2024-12-11T10:54:06.686720+00:00 Arch Linux Importer Fixing VCID-d49w-zdjv-aaas https://security.archlinux.org/AVG-696 35.0.0
2024-09-18T02:01:06.648533+00:00 Arch Linux Importer Affected by VCID-5fs1-75pg-aaah https://security.archlinux.org/AVG-731 34.0.1
2024-09-18T01:59:38.837978+00:00 Arch Linux Importer Fixing VCID-cjbd-4xhr-aaae https://security.archlinux.org/AVG-696 34.0.1
2024-09-18T01:59:38.816237+00:00 Arch Linux Importer Fixing VCID-d49w-zdjv-aaas https://security.archlinux.org/AVG-696 34.0.1
2024-01-31T12:09:57.331305+00:00 Arch Linux Importer Affected by VCID-5fs1-75pg-aaah https://security.archlinux.org/AVG-731 34.0.0rc2
2024-01-31T12:09:55.792064+00:00 Arch Linux Importer Fixing VCID-cjbd-4xhr-aaae https://security.archlinux.org/AVG-696 34.0.0rc2
2024-01-31T12:09:55.769986+00:00 Arch Linux Importer Fixing VCID-d49w-zdjv-aaas https://security.archlinux.org/AVG-696 34.0.0rc2
2024-01-03T22:27:22.408659+00:00 Arch Linux Importer Affected by VCID-5fs1-75pg-aaah https://security.archlinux.org/AVG-731 34.0.0rc1
2024-01-03T22:25:54.718386+00:00 Arch Linux Importer Fixing VCID-cjbd-4xhr-aaae https://security.archlinux.org/AVG-696 34.0.0rc1
2024-01-03T22:25:54.692266+00:00 Arch Linux Importer Fixing VCID-d49w-zdjv-aaas https://security.archlinux.org/AVG-696 34.0.0rc1