Search for packages
Package details: pkg:alpm/archlinux/curl@7.60.0-1
purl pkg:alpm/archlinux/curl@7.60.0-1
Next non-vulnerable version 7.61.0-1
Latest non-vulnerable version 8.14.1-1
Risk 4.4
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-5fs1-75pg-aaah
Aliases:
CVE-2018-0500
Curl_smtp_escape_eob in lib/smtp.c in curl 7.54.1 to and including curl 7.60.0 has a heap-based buffer overflow that might be exploitable by an attacker who can control the data that curl transmits over SMTP with certain settings (i.e., use of a nonstandard --limit-rate argument or CURLOPT_BUFFERSIZE value).
7.61.0-1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-cjbd-4xhr-aaae curl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer Overflow vulnerability in denial of service and more that can result in curl might overflow a heap based memory buffer when closing down an FTP connection with very long server command replies.. This vulnerability appears to have been fixed in curl < 7.54.1 and curl >= 7.60.0. CVE-2018-1000300
VCID-d49w-zdjv-aaas curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded RTSP content.. This vulnerability appears to have been fixed in curl < 7.20.0 and curl >= 7.60.0. CVE-2018-1000301

Date Actor Action Vulnerability Source VulnerableCode Version
2025-03-28T07:46:02.722276+00:00 Arch Linux Importer Affected by VCID-5fs1-75pg-aaah https://security.archlinux.org/AVG-729 36.0.0
2025-03-28T07:44:34.638595+00:00 Arch Linux Importer Fixing VCID-cjbd-4xhr-aaae https://security.archlinux.org/AVG-694 36.0.0
2025-03-28T07:44:34.617886+00:00 Arch Linux Importer Fixing VCID-d49w-zdjv-aaas https://security.archlinux.org/AVG-694 36.0.0
2024-10-20T17:34:01.718859+00:00 Arch Linux Importer Affected by VCID-5fs1-75pg-aaah https://security.archlinux.org/AVG-729 34.0.2
2024-10-20T17:34:01.181217+00:00 Arch Linux Importer Fixing VCID-cjbd-4xhr-aaae https://security.archlinux.org/AVG-694 34.0.2
2024-10-20T17:34:01.154233+00:00 Arch Linux Importer Fixing VCID-d49w-zdjv-aaas https://security.archlinux.org/AVG-694 34.0.2
2024-09-18T02:01:06.695545+00:00 Arch Linux Importer Affected by VCID-5fs1-75pg-aaah https://security.archlinux.org/AVG-729 34.0.1
2024-09-18T01:59:38.934325+00:00 Arch Linux Importer Fixing VCID-cjbd-4xhr-aaae https://security.archlinux.org/AVG-694 34.0.1
2024-09-18T01:59:38.911614+00:00 Arch Linux Importer Fixing VCID-d49w-zdjv-aaas https://security.archlinux.org/AVG-694 34.0.1
2024-01-31T12:09:57.375256+00:00 Arch Linux Importer Affected by VCID-5fs1-75pg-aaah https://security.archlinux.org/AVG-729 34.0.0rc2
2024-01-31T12:09:55.880707+00:00 Arch Linux Importer Fixing VCID-cjbd-4xhr-aaae https://security.archlinux.org/AVG-694 34.0.0rc2
2024-01-31T12:09:55.858337+00:00 Arch Linux Importer Fixing VCID-d49w-zdjv-aaas https://security.archlinux.org/AVG-694 34.0.0rc2
2024-01-03T22:27:22.456459+00:00 Arch Linux Importer Affected by VCID-5fs1-75pg-aaah https://security.archlinux.org/AVG-729 34.0.0rc1
2024-01-03T22:25:54.809063+00:00 Arch Linux Importer Fixing VCID-cjbd-4xhr-aaae https://security.archlinux.org/AVG-694 34.0.0rc1
2024-01-03T22:25:54.787752+00:00 Arch Linux Importer Fixing VCID-d49w-zdjv-aaas https://security.archlinux.org/AVG-694 34.0.0rc1