Red Hat Security AdvisoryRHSA-2019:2181
curl security and bug fix update
Released 2019-08-06 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) curl-7.29.0-54.el7, libcurl-7.29.0-54.el7
- Red Hat Enterprise Linux Client Optional (v. 7) libcurl-devel-7.29.0-54.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) curl-7.29.0-54.el7, libcurl-7.29.0-54.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libcurl-devel-7.29.0-54.el7
- Red Hat Enterprise Linux Server (v. 7) curl-7.29.0-54.el7, libcurl-7.29.0-54.el7, libcurl-7.29.0-54.el7.ppc +2
- Red Hat Enterprise Linux Workstation (v. 7) curl-7.29.0-54.el7, libcurl-7.29.0-54.el7, libcurl-devel-7.29.0-54.el7
Fixes 1 record
Priority MEDIUM 43
Curl versions 7.14.1 through 7.61.1 are vulnerable to a heap-based buffer over-read in the tool_msgs.c:voutf() function that may result in information exposure and denial of service.
CVSS 3.0CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.02099 · Published 2018-10-31 · Partial fix CWE-125
