Search for packages
Package details: pkg:alpm/archlinux/lib32-libcurl-gnutls@7.60.0-1
purl pkg:alpm/archlinux/lib32-libcurl-gnutls@7.60.0-1
Next non-vulnerable version 7.61.0-1
Latest non-vulnerable version 8.4.0-1
Risk 4.4
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-5fs1-75pg-aaah
Aliases:
CVE-2018-0500
Curl_smtp_escape_eob in lib/smtp.c in curl 7.54.1 to and including curl 7.60.0 has a heap-based buffer overflow that might be exploitable by an attacker who can control the data that curl transmits over SMTP with certain settings (i.e., use of a nonstandard --limit-rate argument or CURLOPT_BUFFERSIZE value).
7.61.0-1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-cjbd-4xhr-aaae curl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer Overflow vulnerability in denial of service and more that can result in curl might overflow a heap based memory buffer when closing down an FTP connection with very long server command replies.. This vulnerability appears to have been fixed in curl < 7.54.1 and curl >= 7.60.0. CVE-2018-1000300
VCID-d49w-zdjv-aaas curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded RTSP content.. This vulnerability appears to have been fixed in curl < 7.20.0 and curl >= 7.60.0. CVE-2018-1000301

Date Actor Action Vulnerability Source VulnerableCode Version
2025-03-28T07:46:02.660841+00:00 Arch Linux Importer Affected by VCID-5fs1-75pg-aaah https://security.archlinux.org/AVG-732 36.0.0
2025-03-28T07:44:34.510683+00:00 Arch Linux Importer Fixing VCID-cjbd-4xhr-aaae https://security.archlinux.org/AVG-697 36.0.0
2025-03-28T07:44:34.487421+00:00 Arch Linux Importer Fixing VCID-d49w-zdjv-aaas https://security.archlinux.org/AVG-697 36.0.0
2024-12-11T10:54:17.366557+00:00 Arch Linux Importer Affected by VCID-5fs1-75pg-aaah https://security.archlinux.org/AVG-732 35.0.0
2024-12-11T10:54:06.332648+00:00 Arch Linux Importer Fixing VCID-cjbd-4xhr-aaae https://security.archlinux.org/AVG-697 35.0.0
2024-12-11T10:54:05.952036+00:00 Arch Linux Importer Fixing VCID-d49w-zdjv-aaas https://security.archlinux.org/AVG-697 35.0.0
2024-09-18T02:01:06.626722+00:00 Arch Linux Importer Affected by VCID-5fs1-75pg-aaah https://security.archlinux.org/AVG-732 34.0.1
2024-09-18T01:59:38.794064+00:00 Arch Linux Importer Fixing VCID-cjbd-4xhr-aaae https://security.archlinux.org/AVG-697 34.0.1
2024-09-18T01:59:38.773206+00:00 Arch Linux Importer Fixing VCID-d49w-zdjv-aaas https://security.archlinux.org/AVG-697 34.0.1
2024-01-31T12:09:57.309355+00:00 Arch Linux Importer Affected by VCID-5fs1-75pg-aaah https://security.archlinux.org/AVG-732 34.0.0rc2
2024-01-31T12:09:55.748062+00:00 Arch Linux Importer Fixing VCID-cjbd-4xhr-aaae https://security.archlinux.org/AVG-697 34.0.0rc2
2024-01-31T12:09:55.726211+00:00 Arch Linux Importer Fixing VCID-d49w-zdjv-aaas https://security.archlinux.org/AVG-697 34.0.0rc2
2024-01-03T22:27:22.384584+00:00 Arch Linux Importer Affected by VCID-5fs1-75pg-aaah https://security.archlinux.org/AVG-732 34.0.0rc1
2024-01-03T22:25:54.666123+00:00 Arch Linux Importer Fixing VCID-cjbd-4xhr-aaae https://security.archlinux.org/AVG-697 34.0.0rc1
2024-01-03T22:25:54.642341+00:00 Arch Linux Importer Fixing VCID-d49w-zdjv-aaas https://security.archlinux.org/AVG-697 34.0.0rc1