CVE-2016-8619

Description

The function read_data() in security.c in curl before version 7.51.0 is vulnerable to memory double free.

Base Score

9.8

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

2.182

Vulnerability	OS Platform
Multiple Vulnerabilities are affected in Curl For Windows 7.50.3	Windows
Multiple vulnerabilities are fixed in Curl For Windows 7.51.0	Windows
curl security update(DSA-3705-1) curl_7.38.0-4+deb8u5_i386.deb	Linux
curl security update(DSA-3705-1) curl_7.38.0-4+deb8u5_kfreebsd-i386.deb	Linux
curl security update(DSA-3705-1) curl_7.38.0-4+deb8u5_kfreebsd-amd64.deb	Linux
Curl update (ELSA-2020-5002) curl-7.29.0-59.0.1.el7_9.1.x86_64.rpm	Linux
Libcurl update (ELSA-2020-5002) libcurl-7.29.0-59.0.1.el7_9.1.x86_64.rpm	Linux
Libcurl-devel update (ELSA-2020-5002) libcurl-devel-7.29.0-59.0.1.el7_9.1.x86_64.rpm	Linux
Libcurl update (ELSA-2020-5002) libcurl-7.29.0-59.0.1.el7_9.1.i686.rpm	Linux
Libcurl-devel update (ELSA-2020-5002) libcurl-devel-7.29.0-59.0.1.el7_9.1.i686.rpm	Linux
Curl update (ELSA-2023-7743) curl-7.29.0-59.0.3.el7_9.2.x86_64.rpm	Linux
Libcurl update (ELSA-2023-7743) libcurl-7.29.0-59.0.3.el7_9.2.i686.rpm	Linux
Libcurl update (ELSA-2023-7743) libcurl-7.29.0-59.0.3.el7_9.2.x86_64.rpm	Linux
Libcurl-devel update (ELSA-2023-7743) libcurl-devel-7.29.0-59.0.3.el7_9.2.i686.rpm	Linux
Libcurl-devel update (ELSA-2023-7743) libcurl-devel-7.29.0-59.0.3.el7_9.2.x86_64.rpm	Linux
Double Free Vulnerability (CVE-2016-8619)	NCM

No records found