Red Hat Security AdvisoryRHSA-2013:0983
curl security update
Released 2013-06-25 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) curl-7.15.5-17.el5_9, curl-7.15.5-17.el5_9.i386, curl-7.15.5-17.el5_9.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 6) curl-7.19.7-37.el6_4, libcurl-7.19.7-37.el6_4
- Red Hat Enterprise Linux Desktop Optional (v. 6) curl-7.19.7-37.el6_4, libcurl-devel-7.19.7-37.el6_4
- Red Hat Enterprise Linux HPC Node (v. 6) curl-7.19.7-37.el6_4, libcurl-7.19.7-37.el6_4
- Red Hat Enterprise Linux HPC Node Optional (v. 6) curl-7.19.7-37.el6_4, libcurl-devel-7.19.7-37.el6_4
- Red Hat Enterprise Linux Server (v. 6) curl-7.19.7-37.el6_4, libcurl-7.19.7-37.el6_4, libcurl-7.19.7-37.el6_4.ppc +2
- Red Hat Enterprise Linux Workstation (v. 6) curl-7.19.7-37.el6_4, libcurl-7.19.7-37.el6_4, libcurl-devel-7.19.7-37.el6_4
Fixes 1 record
Priority MEDIUM 42
Heap-based buffer overflow in the curl_easy_unescape function in lib/escape.c in cURL and libcurl 7.7 through 7.30.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.09815 · Published 2013-07-31 · Fixed CWE-119
