Search for packages
| purl | pkg:alpm/archlinux/curl@7.56.1-1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-2297-mgsv-aaaa
Aliases: CVE-2017-8816 |
The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denial of service (integer overflow and resultant buffer overflow, and application crash) or possibly have unspecified other impact via vectors involving long user and password fields. |
Affected by 2 other vulnerabilities. |
|
VCID-em94-9gvm-aaah
Aliases: CVE-2017-8818 |
curl and libcurl before 7.57.0 on 32-bit platforms allow attackers to cause a denial of service (out-of-bounds access and application crash) or possibly have unspecified other impact because too little memory is allocated for interfacing to an SSL library. |
Affected by 2 other vulnerabilities. |
|
VCID-gs8e-s85k-aaaq
Aliases: CVE-2017-8817 |
The FTP wildcard function in curl and libcurl before 7.57.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) or possibly have unspecified other impact via a string that ends with an '[' character. |
Affected by 2 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-4t2f-bfv9-aaan | An IMAP FETCH response line indicates the size of the returned data, in number of bytes. When that response says the data is zero bytes, libcurl would pass on that (non-existing) data with a pointer and the size (zero) to the deliver-data function. libcurl's deliver-data function treats zero as a magic number and invokes strlen() on the data to figure out the length. The strlen() is called on a heap based buffer that might not be zero terminated so libcurl might read beyond the end of it into whatever memory lies after (or just crash) and then deliver that to the application as if it was actually downloaded. |
CVE-2017-1000257
|
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-03-28T07:46:56.926312+00:00 | Arch Linux Importer | Fixing | VCID-4t2f-bfv9-aaan | https://security.archlinux.org/AVG-467 | 36.0.0 |
| 2025-03-28T07:46:56.408003+00:00 | Arch Linux Importer | Affected by | VCID-gs8e-s85k-aaaq | https://security.archlinux.org/AVG-524 | 36.0.0 |
| 2025-03-28T07:46:08.355835+00:00 | Arch Linux Importer | Affected by | VCID-2297-mgsv-aaaa | https://security.archlinux.org/AVG-527 | 36.0.0 |
| 2025-03-28T07:46:08.336872+00:00 | Arch Linux Importer | Affected by | VCID-em94-9gvm-aaah | https://security.archlinux.org/AVG-527 | 36.0.0 |
| 2024-10-20T17:34:03.440774+00:00 | Arch Linux Importer | Fixing | VCID-4t2f-bfv9-aaan | https://security.archlinux.org/AVG-467 | 34.0.2 |
| 2024-10-20T17:34:03.406196+00:00 | Arch Linux Importer | Affected by | VCID-gs8e-s85k-aaaq | https://security.archlinux.org/AVG-524 | 34.0.2 |
| 2024-09-18T02:02:18.278273+00:00 | Arch Linux Importer | Fixing | VCID-4t2f-bfv9-aaan | https://security.archlinux.org/AVG-467 | 34.0.1 |
| 2024-09-18T02:02:17.647916+00:00 | Arch Linux Importer | Affected by | VCID-gs8e-s85k-aaaq | https://security.archlinux.org/AVG-524 | 34.0.1 |
| 2024-09-18T02:01:17.070198+00:00 | Arch Linux Importer | Affected by | VCID-2297-mgsv-aaaa | https://security.archlinux.org/AVG-527 | 34.0.1 |
| 2024-09-18T02:01:17.047937+00:00 | Arch Linux Importer | Affected by | VCID-em94-9gvm-aaah | https://security.archlinux.org/AVG-527 | 34.0.1 |
| 2024-01-31T12:10:00.611119+00:00 | Arch Linux Importer | Fixing | VCID-4t2f-bfv9-aaan | https://security.archlinux.org/AVG-467 | 34.0.0rc2 |
| 2024-01-31T12:10:00.584632+00:00 | Arch Linux Importer | Affected by | VCID-gs8e-s85k-aaaq | https://security.archlinux.org/AVG-524 | 34.0.0rc2 |
| 2024-01-03T22:28:20.094030+00:00 | Arch Linux Importer | Fixing | VCID-4t2f-bfv9-aaan | https://security.archlinux.org/AVG-467 | 34.0.0rc1 |
| 2024-01-03T22:28:19.496353+00:00 | Arch Linux Importer | Affected by | VCID-gs8e-s85k-aaaq | https://security.archlinux.org/AVG-524 | 34.0.0rc1 |
| 2024-01-03T22:27:28.368631+00:00 | Arch Linux Importer | Affected by | VCID-2297-mgsv-aaaa | https://security.archlinux.org/AVG-527 | 34.0.0rc1 |
| 2024-01-03T22:27:28.349528+00:00 | Arch Linux Importer | Affected by | VCID-em94-9gvm-aaah | https://security.archlinux.org/AVG-527 | 34.0.0rc1 |