Search for packages
Package details: pkg:alpm/archlinux/libcurl-gnutls@7.60.0-1
purl pkg:alpm/archlinux/libcurl-gnutls@7.60.0-1
Next non-vulnerable version 7.61.0-1
Latest non-vulnerable version 8.4.0-1
Risk 4.4
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-5fs1-75pg-aaah
Aliases:
CVE-2018-0500
Curl_smtp_escape_eob in lib/smtp.c in curl 7.54.1 to and including curl 7.60.0 has a heap-based buffer overflow that might be exploitable by an attacker who can control the data that curl transmits over SMTP with certain settings (i.e., use of a nonstandard --limit-rate argument or CURLOPT_BUFFERSIZE value).
7.61.0-1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-cjbd-4xhr-aaae curl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer Overflow vulnerability in denial of service and more that can result in curl might overflow a heap based memory buffer when closing down an FTP connection with very long server command replies.. This vulnerability appears to have been fixed in curl < 7.54.1 and curl >= 7.60.0. CVE-2018-1000300
VCID-d49w-zdjv-aaas curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded RTSP content.. This vulnerability appears to have been fixed in curl < 7.20.0 and curl >= 7.60.0. CVE-2018-1000301

Date Actor Action Vulnerability Source VulnerableCode Version
2025-03-28T07:46:02.619635+00:00 Arch Linux Importer Affected by VCID-5fs1-75pg-aaah https://security.archlinux.org/AVG-734 36.0.0
2025-03-28T07:44:34.416919+00:00 Arch Linux Importer Fixing VCID-cjbd-4xhr-aaae https://security.archlinux.org/AVG-699 36.0.0
2025-03-28T07:44:34.394111+00:00 Arch Linux Importer Fixing VCID-d49w-zdjv-aaas https://security.archlinux.org/AVG-699 36.0.0
2024-10-20T17:34:01.664084+00:00 Arch Linux Importer Affected by VCID-5fs1-75pg-aaah https://security.archlinux.org/AVG-734 34.0.2
2024-10-20T17:34:01.066875+00:00 Arch Linux Importer Fixing VCID-cjbd-4xhr-aaae https://security.archlinux.org/AVG-699 34.0.2
2024-10-20T17:34:01.032519+00:00 Arch Linux Importer Fixing VCID-d49w-zdjv-aaas https://security.archlinux.org/AVG-699 34.0.2
2024-09-18T02:01:06.583137+00:00 Arch Linux Importer Affected by VCID-5fs1-75pg-aaah https://security.archlinux.org/AVG-734 34.0.1
2024-09-18T01:59:38.710747+00:00 Arch Linux Importer Fixing VCID-cjbd-4xhr-aaae https://security.archlinux.org/AVG-699 34.0.1
2024-09-18T01:59:38.689746+00:00 Arch Linux Importer Fixing VCID-d49w-zdjv-aaas https://security.archlinux.org/AVG-699 34.0.1
2024-01-31T12:09:57.265606+00:00 Arch Linux Importer Affected by VCID-5fs1-75pg-aaah https://security.archlinux.org/AVG-734 34.0.0rc2
2024-01-31T12:09:55.656968+00:00 Arch Linux Importer Fixing VCID-cjbd-4xhr-aaae https://security.archlinux.org/AVG-699 34.0.0rc2
2024-01-31T12:09:55.635110+00:00 Arch Linux Importer Fixing VCID-d49w-zdjv-aaas https://security.archlinux.org/AVG-699 34.0.0rc2
2024-01-03T22:27:22.336635+00:00 Arch Linux Importer Affected by VCID-5fs1-75pg-aaah https://security.archlinux.org/AVG-734 34.0.0rc1
2024-01-03T22:25:54.565663+00:00 Arch Linux Importer Fixing VCID-cjbd-4xhr-aaae https://security.archlinux.org/AVG-699 34.0.0rc1
2024-01-03T22:25:54.541218+00:00 Arch Linux Importer Fixing VCID-d49w-zdjv-aaas https://security.archlinux.org/AVG-699 34.0.0rc1