Search for packages
Package details: pkg:alpm/archlinux/lib32-curl@7.60.0-1
purl pkg:alpm/archlinux/lib32-curl@7.60.0-1
Next non-vulnerable version 7.61.0-1
Latest non-vulnerable version 8.4.0-1
Risk 4.4
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-5fs1-75pg-aaah
Aliases:
CVE-2018-0500
Curl_smtp_escape_eob in lib/smtp.c in curl 7.54.1 to and including curl 7.60.0 has a heap-based buffer overflow that might be exploitable by an attacker who can control the data that curl transmits over SMTP with certain settings (i.e., use of a nonstandard --limit-rate argument or CURLOPT_BUFFERSIZE value).
7.61.0-1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-cjbd-4xhr-aaae curl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer Overflow vulnerability in denial of service and more that can result in curl might overflow a heap based memory buffer when closing down an FTP connection with very long server command replies.. This vulnerability appears to have been fixed in curl < 7.54.1 and curl >= 7.60.0. CVE-2018-1000300
VCID-d49w-zdjv-aaas curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded RTSP content.. This vulnerability appears to have been fixed in curl < 7.20.0 and curl >= 7.60.0. CVE-2018-1000301

Date Actor Action Vulnerability Source VulnerableCode Version
2025-03-28T07:46:02.701802+00:00 Arch Linux Importer Affected by VCID-5fs1-75pg-aaah https://security.archlinux.org/AVG-730 36.0.0
2025-03-28T07:44:34.597101+00:00 Arch Linux Importer Fixing VCID-cjbd-4xhr-aaae https://security.archlinux.org/AVG-695 36.0.0
2025-03-28T07:44:34.575771+00:00 Arch Linux Importer Fixing VCID-d49w-zdjv-aaas https://security.archlinux.org/AVG-695 36.0.0
2024-12-11T10:54:18.109084+00:00 Arch Linux Importer Affected by VCID-5fs1-75pg-aaah https://security.archlinux.org/AVG-730 35.0.0
2024-12-11T10:54:07.776022+00:00 Arch Linux Importer Fixing VCID-cjbd-4xhr-aaae https://security.archlinux.org/AVG-695 35.0.0
2024-12-11T10:54:07.406108+00:00 Arch Linux Importer Fixing VCID-d49w-zdjv-aaas https://security.archlinux.org/AVG-695 35.0.0
2024-09-18T02:01:06.671153+00:00 Arch Linux Importer Affected by VCID-5fs1-75pg-aaah https://security.archlinux.org/AVG-730 34.0.1
2024-09-18T01:59:38.888545+00:00 Arch Linux Importer Fixing VCID-cjbd-4xhr-aaae https://security.archlinux.org/AVG-695 34.0.1
2024-09-18T01:59:38.864080+00:00 Arch Linux Importer Fixing VCID-d49w-zdjv-aaas https://security.archlinux.org/AVG-695 34.0.1
2024-01-31T12:09:57.353468+00:00 Arch Linux Importer Affected by VCID-5fs1-75pg-aaah https://security.archlinux.org/AVG-730 34.0.0rc2
2024-01-31T12:09:55.836246+00:00 Arch Linux Importer Fixing VCID-cjbd-4xhr-aaae https://security.archlinux.org/AVG-695 34.0.0rc2
2024-01-31T12:09:55.814265+00:00 Arch Linux Importer Fixing VCID-d49w-zdjv-aaas https://security.archlinux.org/AVG-695 34.0.0rc2
2024-01-03T22:27:22.434869+00:00 Arch Linux Importer Affected by VCID-5fs1-75pg-aaah https://security.archlinux.org/AVG-730 34.0.0rc1
2024-01-03T22:25:54.766372+00:00 Arch Linux Importer Fixing VCID-cjbd-4xhr-aaae https://security.archlinux.org/AVG-695 34.0.0rc1
2024-01-03T22:25:54.744806+00:00 Arch Linux Importer Fixing VCID-d49w-zdjv-aaas https://security.archlinux.org/AVG-695 34.0.0rc1