VulnerableCode Package Details - pkg:alpm/archlinux/lib32-libcurl-compat@7.59.0-1

Search for packages

Vulnerability	Summary	Fixed by
VCID-cjbd-4xhr-aaae Aliases: CVE-2018-1000300	curl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer Overflow vulnerability in denial of service and more that can result in curl might overflow a heap based memory buffer when closing down an FTP connection with very long server command replies.. This vulnerability appears to have been fixed in curl < 7.54.1 and curl >= 7.60.0.	7.60.0-1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-d49w-zdjv-aaas Aliases: CVE-2018-1000301	curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded RTSP content.. This vulnerability appears to have been fixed in curl < 7.20.0 and curl >= 7.60.0.	7.60.0-1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}

Vulnerability

Summary

Fixed by

VCID-cjbd-4xhr-aaae
Aliases:
CVE-2018-1000300

curl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer Overflow vulnerability in denial of service and more that can result in curl might overflow a heap based memory buffer when closing down an FTP connection with very long server command replies.. This vulnerability appears to have been fixed in curl < 7.54.1 and curl >= 7.60.0.

7.60.0-1
Affected by 1 other vulnerability.

VCID-d49w-zdjv-aaas
Aliases:
CVE-2018-1000301

curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded RTSP content.. This vulnerability appears to have been fixed in curl < 7.20.0 and curl >= 7.60.0.

7.60.0-1
Affected by 1 other vulnerability.

Vulnerability	Summary	Aliases
VCID-7y9x-jdpb-aaaq	A buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling code that allows an attacker to cause a denial of service or information leakage	CVE-2018-1000122
VCID-qeam-padc-aaap	A NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code that allows an attacker to cause a denial of service	CVE-2018-1000121
VCID-tgaa-yvya-aaan	A buffer overflow exists in curl 7.12.3 to and including curl 7.58.0 in the FTP URL handling that allows an attacker to cause a denial of service or worse.	CVE-2018-1000120 GHSA-674j-7m97-j2p9

Vulnerability

Summary

Aliases

VCID-7y9x-jdpb-aaaq

A buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling code that allows an attacker to cause a denial of service or information leakage

CVE-2018-1000122

VCID-qeam-padc-aaap

A NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code that allows an attacker to cause a denial of service

CVE-2018-1000121

VCID-tgaa-yvya-aaan

A buffer overflow exists in curl 7.12.3 to and including curl 7.58.0 in the FTP URL handling that allows an attacker to cause a denial of service or worse.

CVE-2018-1000120
GHSA-674j-7m97-j2p9

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2025-03-28T07:46:54.411387+00:00	Arch Linux Importer	Fixing	VCID-tgaa-yvya-aaan	https://security.archlinux.org/AVG-660	36.0.0
2025-03-28T07:46:54.380042+00:00	Arch Linux Importer	Fixing	VCID-qeam-padc-aaap	https://security.archlinux.org/AVG-660	36.0.0
2025-03-28T07:46:54.359205+00:00	Arch Linux Importer	Fixing	VCID-7y9x-jdpb-aaaq	https://security.archlinux.org/AVG-660	36.0.0
2025-03-28T07:44:34.549031+00:00	Arch Linux Importer	Affected by	VCID-cjbd-4xhr-aaae	https://security.archlinux.org/AVG-696	36.0.0
2025-03-28T07:44:34.527409+00:00	Arch Linux Importer	Affected by	VCID-d49w-zdjv-aaas	https://security.archlinux.org/AVG-696	36.0.0
2024-12-11T10:54:35.292925+00:00	Arch Linux Importer	Fixing	VCID-tgaa-yvya-aaan	https://security.archlinux.org/AVG-660	35.0.0
2024-12-11T10:54:34.928183+00:00	Arch Linux Importer	Fixing	VCID-qeam-padc-aaap	https://security.archlinux.org/AVG-660	35.0.0
2024-12-11T10:54:34.563353+00:00	Arch Linux Importer	Fixing	VCID-7y9x-jdpb-aaaq	https://security.archlinux.org/AVG-660	35.0.0
2024-12-11T10:54:07.036941+00:00	Arch Linux Importer	Affected by	VCID-cjbd-4xhr-aaae	https://security.archlinux.org/AVG-696	35.0.0
2024-12-11T10:54:06.682716+00:00	Arch Linux Importer	Affected by	VCID-d49w-zdjv-aaas	https://security.archlinux.org/AVG-696	35.0.0
2024-09-18T02:02:15.258839+00:00	Arch Linux Importer	Fixing	VCID-tgaa-yvya-aaan	https://security.archlinux.org/AVG-660	34.0.1
2024-09-18T02:02:15.232128+00:00	Arch Linux Importer	Fixing	VCID-qeam-padc-aaap	https://security.archlinux.org/AVG-660	34.0.1
2024-09-18T02:02:15.205829+00:00	Arch Linux Importer	Fixing	VCID-7y9x-jdpb-aaaq	https://security.archlinux.org/AVG-660	34.0.1
2024-09-18T01:59:38.833616+00:00	Arch Linux Importer	Affected by	VCID-cjbd-4xhr-aaae	https://security.archlinux.org/AVG-696	34.0.1
2024-09-18T01:59:38.810455+00:00	Arch Linux Importer	Affected by	VCID-d49w-zdjv-aaas	https://security.archlinux.org/AVG-696	34.0.1
2024-01-31T12:09:59.992217+00:00	Arch Linux Importer	Fixing	VCID-tgaa-yvya-aaan	https://security.archlinux.org/AVG-660	34.0.0rc2
2024-01-31T12:09:59.969582+00:00	Arch Linux Importer	Fixing	VCID-qeam-padc-aaap	https://security.archlinux.org/AVG-660	34.0.0rc2
2024-01-31T12:09:59.947321+00:00	Arch Linux Importer	Fixing	VCID-7y9x-jdpb-aaaq	https://security.archlinux.org/AVG-660	34.0.0rc2
2024-01-31T12:09:55.787210+00:00	Arch Linux Importer	Affected by	VCID-cjbd-4xhr-aaae	https://security.archlinux.org/AVG-696	34.0.0rc2
2024-01-31T12:09:55.765325+00:00	Arch Linux Importer	Affected by	VCID-d49w-zdjv-aaas	https://security.archlinux.org/AVG-696	34.0.0rc2
2024-01-03T22:28:17.393527+00:00	Arch Linux Importer	Fixing	VCID-tgaa-yvya-aaan	https://security.archlinux.org/AVG-660	34.0.0rc1
2024-01-03T22:28:17.372337+00:00	Arch Linux Importer	Fixing	VCID-qeam-padc-aaap	https://security.archlinux.org/AVG-660	34.0.0rc1
2024-01-03T22:28:17.351218+00:00	Arch Linux Importer	Fixing	VCID-7y9x-jdpb-aaaq	https://security.archlinux.org/AVG-660	34.0.0rc1
2024-01-03T22:25:54.713753+00:00	Arch Linux Importer	Affected by	VCID-cjbd-4xhr-aaae	https://security.archlinux.org/AVG-696	34.0.0rc1
2024-01-03T22:25:54.687504+00:00	Arch Linux Importer	Affected by	VCID-d49w-zdjv-aaas	https://security.archlinux.org/AVG-696	34.0.0rc1

2025-03-28T07:46:54.411387+00:00

Arch Linux Importer

Fixing

Next non-vulnerable version	7.61.0-1
Latest non-vulnerable version	8.4.0-1
Risk	4.5