CVE-2013-2174
Description
Heap-based buffer overflow in the curl_easy_unescape function in lib/escape.c in cURL and libcurl 7.7 through 7.30.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted string ending in a % (percent) character.
Risk Information
Base Score
9.8
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
3.181
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Vulnerability CVE-2013-2174 are affected in Curl For Windows 7.30.0 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.21.6 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.21.4 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.21.5 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.21.7 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.22.0 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.23.0 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.23.1 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.24.0 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.25.0 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.26.0 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.27.0 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.28.0 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.28.1 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.29.0 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.30.0 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.17.1 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.18.0 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.18.1 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.18.2 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.19.0 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.19.1 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.19.2 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.19.3 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.19.4 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.19.5 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.19.6 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.19.7 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.20.0 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.20.1 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.21.0 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.21.1 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.21.2 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.21.3 | Windows |
| Vulnerabilities CVE-2013-1944,CVE-2013-2174,CVE-2014-8150,CVE-2017-1000254 are affected in Curl For Windows 7.10 | Windows |
| Vulnerabilities CVE-2013-1944,CVE-2013-2174,CVE-2014-8150,CVE-2017-1000254 are affected in Curl For Windows 7.10.1 | Windows |
| Vulnerabilities CVE-2013-1944,CVE-2013-2174,CVE-2014-8150,CVE-2017-1000254 are affected in Curl For Windows 7.10.2 | Windows |
| Vulnerabilities CVE-2013-1944,CVE-2013-2174,CVE-2014-8150,CVE-2017-1000254 are affected in Curl For Windows 7.10.3 | Windows |
| Vulnerabilities CVE-2013-1944,CVE-2013-2174,CVE-2014-8150,CVE-2017-1000254 are affected in Curl For Windows 7.10.4 | Windows |
| Vulnerabilities CVE-2013-1944,CVE-2013-2174,CVE-2014-8150,CVE-2017-1000254 are affected in Curl For Windows 7.10.5 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.10.6 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.10.7 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.10.8 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.11.0 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.11.1 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.11.2 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.12.0 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.12.1 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.12.2 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.12.3 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.13.0 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.13.1 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.13.2 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.14.0 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.14.1 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.15.0 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.15.1 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.15.2 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.15.3 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.15.4 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.15.5 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.16.0 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.16.1 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.16.2 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.16.3 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.16.4 | Windows |
| Multiple Vulnerabilities are affected in Curl For Windows 7.17.0 | Windows |
| Vulnerabilities CVE-2013-1944,CVE-2013-2174,CVE-2014-8150,CVE-2017-1000254 are affected in Curl For Windows 7.7 | Windows |
| Vulnerabilities CVE-2013-1944,CVE-2013-2174,CVE-2014-8150,CVE-2017-1000254 are affected in Curl For Windows 7.7.1 | Windows |
| Vulnerabilities CVE-2013-1944,CVE-2013-2174,CVE-2014-8150,CVE-2017-1000254 are affected in Curl For Windows 7.7.2 | Windows |
| Vulnerabilities CVE-2013-1944,CVE-2013-2174,CVE-2014-8150,CVE-2017-1000254 are affected in Curl For Windows 7.7.3 | Windows |
| Vulnerabilities CVE-2013-1944,CVE-2013-2174,CVE-2014-8150,CVE-2017-1000254 are affected in Curl For Windows 7.8 | Windows |
| Vulnerabilities CVE-2013-1944,CVE-2013-2174,CVE-2014-8150,CVE-2017-1000254 are affected in Curl For Windows 7.8.1 | Windows |
| Vulnerabilities CVE-2013-1944,CVE-2013-2174,CVE-2014-8150,CVE-2017-1000254 are affected in Curl For Windows 7.9 | Windows |
| Vulnerabilities CVE-2013-1944,CVE-2013-2174,CVE-2014-8150,CVE-2017-1000254 are affected in Curl For Windows 7.9.1 | Windows |
| Vulnerabilities CVE-2013-1944,CVE-2013-2174,CVE-2014-8150,CVE-2017-1000254 are affected in Curl For Windows 7.9.2 | Windows |
| Vulnerabilities CVE-2013-1944,CVE-2013-2174,CVE-2014-8150,CVE-2017-1000254 are affected in Curl For Windows 7.9.3 | Windows |
| Vulnerabilities CVE-2013-1944,CVE-2013-2174,CVE-2014-8150,CVE-2017-1000254 are affected in Curl For Windows 7.9.4 | Windows |
| Vulnerabilities CVE-2013-1944,CVE-2013-2174,CVE-2014-8150,CVE-2017-1000254 are affected in Curl For Windows 7.9.5 | Windows |
| Vulnerabilities CVE-2013-1944,CVE-2013-2174,CVE-2014-8150,CVE-2017-1000254 are affected in Curl For Windows 7.9.6 | Windows |
| Vulnerabilities CVE-2013-1944,CVE-2013-2174,CVE-2014-8150,CVE-2017-1000254 are affected in Curl For Windows 7.9.7 | Windows |
| Vulnerabilities CVE-2013-1944,CVE-2013-2174,CVE-2014-8150,CVE-2017-1000254 are affected in Curl For Windows 7.9.8 | Windows |
| Vulnerabilities CVE-2013-2174 are fixed in Curl For Windows 7.31.0 | Windows |
| (RHSA-2013:0983) Moderate: curl security update curl-7.15.5-17.el5_9.i386.rpm | Linux |
| (RHSA-2013:0983) Moderate: curl security update curl-7.15.5-17.el5_9.x86_64.rpm | Linux |
| (RHSA-2013:0983) Moderate: curl security update curl-devel-7.15.5-17.el5_9.i386.rpm | Linux |
| (RHSA-2013:0983) Moderate: curl security update curl-devel-7.15.5-17.el5_9.x86_64.rpm | Linux |
| Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2013-2174) | NCM |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234