Red Hat Security AdvisoryRHSA-2017:2016
curl security, bug fix, and enhancement update
Released 2017-08-01 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) curl-7.29.0-42.el7, libcurl-7.29.0-42.el7
- Red Hat Enterprise Linux Client Optional (v. 7) libcurl-devel-7.29.0-42.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) curl-7.29.0-42.el7, libcurl-7.29.0-42.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libcurl-devel-7.29.0-42.el7
- Red Hat Enterprise Linux Server (v. 7) curl-7.29.0-42.el7, libcurl-7.29.0-42.el7, libcurl-7.29.0-42.el7.ppc +2
- Red Hat Enterprise Linux Workstation (v. 7) curl-7.29.0-42.el7, libcurl-7.29.0-42.el7, libcurl-devel-7.29.0-42.el7
Fixes 1 record
Priority MEDIUM 56
Multiple integer overflows in the (1) curl_escape, (2) curl_easy_escape, (3) curl_unescape, and (4) curl_easy_unescape functions in libcurl before 7.50.3 allow attackers to have unspecified impact via a string of length…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.11737 · Published 2016-10-07 · Partial fix CWE-190
