VulnerableCode Package Details - pkg:alpm/archlinux/lib32-curl@7.59.0-1

Search for packages

Vulnerability	Summary	Fixed by
VCID-cjbd-4xhr-aaae Aliases: CVE-2018-1000300	curl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer Overflow vulnerability in denial of service and more that can result in curl might overflow a heap based memory buffer when closing down an FTP connection with very long server command replies.. This vulnerability appears to have been fixed in curl < 7.54.1 and curl >= 7.60.0.	7.60.0-1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-d49w-zdjv-aaas Aliases: CVE-2018-1000301	curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded RTSP content.. This vulnerability appears to have been fixed in curl < 7.20.0 and curl >= 7.60.0.	7.60.0-1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}

Vulnerability

Summary

Fixed by

VCID-cjbd-4xhr-aaae
Aliases:
CVE-2018-1000300

curl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer Overflow vulnerability in denial of service and more that can result in curl might overflow a heap based memory buffer when closing down an FTP connection with very long server command replies.. This vulnerability appears to have been fixed in curl < 7.54.1 and curl >= 7.60.0.

7.60.0-1
Affected by 1 other vulnerability.

VCID-d49w-zdjv-aaas
Aliases:
CVE-2018-1000301

curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded RTSP content.. This vulnerability appears to have been fixed in curl < 7.20.0 and curl >= 7.60.0.

7.60.0-1
Affected by 1 other vulnerability.

Vulnerability	Summary	Aliases
VCID-7y9x-jdpb-aaaq	A buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling code that allows an attacker to cause a denial of service or information leakage	CVE-2018-1000122
VCID-qeam-padc-aaap	A NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code that allows an attacker to cause a denial of service	CVE-2018-1000121
VCID-tgaa-yvya-aaan	A buffer overflow exists in curl 7.12.3 to and including curl 7.58.0 in the FTP URL handling that allows an attacker to cause a denial of service or worse.	CVE-2018-1000120 GHSA-674j-7m97-j2p9

Vulnerability

Summary

Aliases

VCID-7y9x-jdpb-aaaq

A buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling code that allows an attacker to cause a denial of service or information leakage

CVE-2018-1000122

VCID-qeam-padc-aaap

A NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code that allows an attacker to cause a denial of service

CVE-2018-1000121

VCID-tgaa-yvya-aaan

A buffer overflow exists in curl 7.12.3 to and including curl 7.58.0 in the FTP URL handling that allows an attacker to cause a denial of service or worse.

CVE-2018-1000120
GHSA-674j-7m97-j2p9

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2025-03-28T07:46:54.637339+00:00	Arch Linux Importer	Fixing	VCID-tgaa-yvya-aaan	https://security.archlinux.org/AVG-654	36.0.0
2025-03-28T07:46:54.605721+00:00	Arch Linux Importer	Fixing	VCID-qeam-padc-aaap	https://security.archlinux.org/AVG-654	36.0.0
2025-03-28T07:46:54.585329+00:00	Arch Linux Importer	Fixing	VCID-7y9x-jdpb-aaaq	https://security.archlinux.org/AVG-654	36.0.0
2025-03-28T07:44:34.592040+00:00	Arch Linux Importer	Affected by	VCID-cjbd-4xhr-aaae	https://security.archlinux.org/AVG-695	36.0.0
2025-03-28T07:44:34.570688+00:00	Arch Linux Importer	Affected by	VCID-d49w-zdjv-aaas	https://security.archlinux.org/AVG-695	36.0.0
2024-12-11T10:54:37.548633+00:00	Arch Linux Importer	Fixing	VCID-tgaa-yvya-aaan	https://security.archlinux.org/AVG-654	35.0.0
2024-12-11T10:54:37.175048+00:00	Arch Linux Importer	Fixing	VCID-qeam-padc-aaap	https://security.archlinux.org/AVG-654	35.0.0
2024-12-11T10:54:36.799931+00:00	Arch Linux Importer	Fixing	VCID-7y9x-jdpb-aaaq	https://security.archlinux.org/AVG-654	35.0.0
2024-12-11T10:54:07.771852+00:00	Arch Linux Importer	Affected by	VCID-cjbd-4xhr-aaae	https://security.archlinux.org/AVG-695	35.0.0
2024-12-11T10:54:07.401532+00:00	Arch Linux Importer	Affected by	VCID-d49w-zdjv-aaas	https://security.archlinux.org/AVG-695	35.0.0
2024-09-18T02:02:15.618215+00:00	Arch Linux Importer	Fixing	VCID-tgaa-yvya-aaan	https://security.archlinux.org/AVG-654	34.0.1
2024-09-18T02:02:15.596521+00:00	Arch Linux Importer	Fixing	VCID-qeam-padc-aaap	https://security.archlinux.org/AVG-654	34.0.1
2024-09-18T02:02:15.574752+00:00	Arch Linux Importer	Fixing	VCID-7y9x-jdpb-aaaq	https://security.archlinux.org/AVG-654	34.0.1
2024-09-18T01:59:38.884055+00:00	Arch Linux Importer	Affected by	VCID-cjbd-4xhr-aaae	https://security.archlinux.org/AVG-695	34.0.1
2024-09-18T01:59:38.856885+00:00	Arch Linux Importer	Affected by	VCID-d49w-zdjv-aaas	https://security.archlinux.org/AVG-695	34.0.1
2024-01-31T12:10:00.190014+00:00	Arch Linux Importer	Fixing	VCID-tgaa-yvya-aaan	https://security.archlinux.org/AVG-654	34.0.0rc2
2024-01-31T12:10:00.167870+00:00	Arch Linux Importer	Fixing	VCID-qeam-padc-aaap	https://security.archlinux.org/AVG-654	34.0.0rc2
2024-01-31T12:10:00.145926+00:00	Arch Linux Importer	Fixing	VCID-7y9x-jdpb-aaaq	https://security.archlinux.org/AVG-654	34.0.0rc2
2024-01-31T12:09:55.831510+00:00	Arch Linux Importer	Affected by	VCID-cjbd-4xhr-aaae	https://security.archlinux.org/AVG-695	34.0.0rc2
2024-01-31T12:09:55.809588+00:00	Arch Linux Importer	Affected by	VCID-d49w-zdjv-aaas	https://security.archlinux.org/AVG-695	34.0.0rc2
2024-01-03T22:28:17.616189+00:00	Arch Linux Importer	Fixing	VCID-tgaa-yvya-aaan	https://security.archlinux.org/AVG-654	34.0.0rc1
2024-01-03T22:28:17.592198+00:00	Arch Linux Importer	Fixing	VCID-qeam-padc-aaap	https://security.archlinux.org/AVG-654	34.0.0rc1
2024-01-03T22:28:17.565797+00:00	Arch Linux Importer	Fixing	VCID-7y9x-jdpb-aaaq	https://security.archlinux.org/AVG-654	34.0.0rc1
2024-01-03T22:25:54.761722+00:00	Arch Linux Importer	Affected by	VCID-cjbd-4xhr-aaae	https://security.archlinux.org/AVG-695	34.0.0rc1
2024-01-03T22:25:54.740066+00:00	Arch Linux Importer	Affected by	VCID-d49w-zdjv-aaas	https://security.archlinux.org/AVG-695	34.0.0rc1

2025-03-28T07:46:54.637339+00:00

Arch Linux Importer

Fixing

Next non-vulnerable version	7.61.0-1
Latest non-vulnerable version	8.4.0-1
Risk	4.5