VulnerableCode Package Details - pkg:alpm/archlinux/lib32-libcurl-gnutls@7.59.0-1

Search for packages

Vulnerability	Summary	Fixed by
VCID-cjbd-4xhr-aaae Aliases: CVE-2018-1000300	curl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer Overflow vulnerability in denial of service and more that can result in curl might overflow a heap based memory buffer when closing down an FTP connection with very long server command replies.. This vulnerability appears to have been fixed in curl < 7.54.1 and curl >= 7.60.0.	7.60.0-1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-d49w-zdjv-aaas Aliases: CVE-2018-1000301	curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded RTSP content.. This vulnerability appears to have been fixed in curl < 7.20.0 and curl >= 7.60.0.	7.60.0-1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}

Vulnerability

Summary

Fixed by

VCID-cjbd-4xhr-aaae
Aliases:
CVE-2018-1000300

curl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer Overflow vulnerability in denial of service and more that can result in curl might overflow a heap based memory buffer when closing down an FTP connection with very long server command replies.. This vulnerability appears to have been fixed in curl < 7.54.1 and curl >= 7.60.0.

7.60.0-1
Affected by 1 other vulnerability.

VCID-d49w-zdjv-aaas
Aliases:
CVE-2018-1000301

curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded RTSP content.. This vulnerability appears to have been fixed in curl < 7.20.0 and curl >= 7.60.0.

7.60.0-1
Affected by 1 other vulnerability.

Vulnerability	Summary	Aliases
VCID-7y9x-jdpb-aaaq	A buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling code that allows an attacker to cause a denial of service or information leakage	CVE-2018-1000122
VCID-qeam-padc-aaap	A NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code that allows an attacker to cause a denial of service	CVE-2018-1000121
VCID-tgaa-yvya-aaan	A buffer overflow exists in curl 7.12.3 to and including curl 7.58.0 in the FTP URL handling that allows an attacker to cause a denial of service or worse.	CVE-2018-1000120 GHSA-674j-7m97-j2p9

Vulnerability

Summary

Aliases

VCID-7y9x-jdpb-aaaq

A buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling code that allows an attacker to cause a denial of service or information leakage

CVE-2018-1000122

VCID-qeam-padc-aaap

A NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code that allows an attacker to cause a denial of service

CVE-2018-1000121

VCID-tgaa-yvya-aaan

A buffer overflow exists in curl 7.12.3 to and including curl 7.58.0 in the FTP URL handling that allows an attacker to cause a denial of service or worse.

CVE-2018-1000120
GHSA-674j-7m97-j2p9

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2025-03-28T07:46:54.488573+00:00	Arch Linux Importer	Fixing	VCID-tgaa-yvya-aaan	https://security.archlinux.org/AVG-656	36.0.0
2025-03-28T07:46:54.456307+00:00	Arch Linux Importer	Fixing	VCID-qeam-padc-aaap	https://security.archlinux.org/AVG-656	36.0.0
2025-03-28T07:46:54.432168+00:00	Arch Linux Importer	Fixing	VCID-7y9x-jdpb-aaaq	https://security.archlinux.org/AVG-656	36.0.0
2025-03-28T07:44:34.505498+00:00	Arch Linux Importer	Affected by	VCID-cjbd-4xhr-aaae	https://security.archlinux.org/AVG-697	36.0.0
2025-03-28T07:44:34.482113+00:00	Arch Linux Importer	Affected by	VCID-d49w-zdjv-aaas	https://security.archlinux.org/AVG-697	36.0.0
2024-12-11T10:54:36.409853+00:00	Arch Linux Importer	Fixing	VCID-tgaa-yvya-aaan	https://security.archlinux.org/AVG-656	35.0.0
2024-12-11T10:54:36.029082+00:00	Arch Linux Importer	Fixing	VCID-qeam-padc-aaap	https://security.archlinux.org/AVG-656	35.0.0
2024-12-11T10:54:35.656207+00:00	Arch Linux Importer	Fixing	VCID-7y9x-jdpb-aaaq	https://security.archlinux.org/AVG-656	35.0.0
2024-12-11T10:54:06.328454+00:00	Arch Linux Importer	Affected by	VCID-cjbd-4xhr-aaae	https://security.archlinux.org/AVG-697	35.0.0
2024-12-11T10:54:05.944842+00:00	Arch Linux Importer	Affected by	VCID-d49w-zdjv-aaas	https://security.archlinux.org/AVG-697	35.0.0
2024-09-18T02:02:15.331066+00:00	Arch Linux Importer	Fixing	VCID-tgaa-yvya-aaan	https://security.archlinux.org/AVG-656	34.0.1
2024-09-18T02:02:15.309071+00:00	Arch Linux Importer	Fixing	VCID-qeam-padc-aaap	https://security.archlinux.org/AVG-656	34.0.1
2024-09-18T02:02:15.283076+00:00	Arch Linux Importer	Fixing	VCID-7y9x-jdpb-aaaq	https://security.archlinux.org/AVG-656	34.0.1
2024-09-18T01:59:38.789792+00:00	Arch Linux Importer	Affected by	VCID-cjbd-4xhr-aaae	https://security.archlinux.org/AVG-697	34.0.1
2024-09-18T01:59:38.768728+00:00	Arch Linux Importer	Affected by	VCID-d49w-zdjv-aaas	https://security.archlinux.org/AVG-697	34.0.1
2024-01-31T12:10:00.057988+00:00	Arch Linux Importer	Fixing	VCID-tgaa-yvya-aaan	https://security.archlinux.org/AVG-656	34.0.0rc2
2024-01-31T12:10:00.036123+00:00	Arch Linux Importer	Fixing	VCID-qeam-padc-aaap	https://security.archlinux.org/AVG-656	34.0.0rc2
2024-01-31T12:10:00.014259+00:00	Arch Linux Importer	Fixing	VCID-7y9x-jdpb-aaaq	https://security.archlinux.org/AVG-656	34.0.0rc2
2024-01-31T12:09:55.743419+00:00	Arch Linux Importer	Affected by	VCID-cjbd-4xhr-aaae	https://security.archlinux.org/AVG-697	34.0.0rc2
2024-01-31T12:09:55.721552+00:00	Arch Linux Importer	Affected by	VCID-d49w-zdjv-aaas	https://security.archlinux.org/AVG-697	34.0.0rc2
2024-01-03T22:28:17.466967+00:00	Arch Linux Importer	Fixing	VCID-tgaa-yvya-aaan	https://security.archlinux.org/AVG-656	34.0.0rc1
2024-01-03T22:28:17.440969+00:00	Arch Linux Importer	Fixing	VCID-qeam-padc-aaap	https://security.archlinux.org/AVG-656	34.0.0rc1
2024-01-03T22:28:17.414934+00:00	Arch Linux Importer	Fixing	VCID-7y9x-jdpb-aaaq	https://security.archlinux.org/AVG-656	34.0.0rc1
2024-01-03T22:25:54.661500+00:00	Arch Linux Importer	Affected by	VCID-cjbd-4xhr-aaae	https://security.archlinux.org/AVG-697	34.0.0rc1
2024-01-03T22:25:54.637697+00:00	Arch Linux Importer	Affected by	VCID-d49w-zdjv-aaas	https://security.archlinux.org/AVG-697	34.0.0rc1

2025-03-28T07:46:54.488573+00:00

Arch Linux Importer

Fixing

Next non-vulnerable version	7.61.0-1
Latest non-vulnerable version	8.4.0-1
Risk	4.5