Home

CVE-2018-1000301

Description

curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded RTSP content.. This vulnerability appears to have been fixed in curl < 7.20.0 and curl >= 7.60.0.

Risk Information

Base Score
9.1
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
EPSS Score
Exploitation Probability
2.562

Associated Vulnerability

VulnerabilityOS Platform
Vulnerability CVE-2018-1000300,CVE-2018-1000301 are affected in Curl For Windows 7.59.0Windows
Vulnerabilities CVE-2018-1000300,CVE-2018-1000301 are fixed in Curl For Windows 7.60.0Windows
Multiple Vulnerabilities are affected in Oracle Corporation PeopleSoft Enterprise PeopleTools 8.55Windows
Multiple Vulnerabilities are affected in Oracle Corporation PeopleSoft Enterprise PeopleTools 8.56Windows
Multiple Vulnerabilities are affected in Oracle Corporation PeopleSoft Enterprise PeopleTools 8.57Windows
HTTP, HTTPS, and FTP client and client libraries (USN-3648-1) curl_7.55.1-1ubuntu2.5_i386.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-3648-1) curl_7.55.1-1ubuntu2.5_amd64.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-3648-1) curl_7.58.0-2ubuntu3.1_i386.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-3648-1) curl_7.58.0-2ubuntu3.1_amd64.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-3648-1) libcurl3_7.55.1-1ubuntu2.5_i386.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-3648-1) libcurl3_7.55.1-1ubuntu2.5_amd64.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-3648-1) libcurl4_7.58.0-2ubuntu3.1_i386.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-3648-1) libcurl4_7.58.0-2ubuntu3.1_amd64.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-3648-1) libcurl3-nss_7.55.1-1ubuntu2.5_i386.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-3648-1) libcurl3-nss_7.55.1-1ubuntu2.5_amd64.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-3648-1) libcurl3-nss_7.58.0-2ubuntu3.1_i386.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-3648-1) libcurl3-nss_7.58.0-2ubuntu3.1_amd64.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-3648-1) libcurl3-gnutls_7.55.1-1ubuntu2.5_i386.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-3648-1) libcurl3-gnutls_7.55.1-1ubuntu2.5_amd64.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-3648-1) libcurl3-gnutls_7.58.0-2ubuntu3.1_i386.debLinux
HTTP, HTTPS, and FTP client and client libraries (USN-3648-1) libcurl3-gnutls_7.58.0-2ubuntu3.1_amd64.debLinux
curl security update(DSA-4202-1) curl_7.52.1-5+deb9u6_i386.debLinux
curl security update(DSA-4202-1) curl_7.52.1-5+deb9u6_amd64.debLinux
(RHSA-2018:3157) curl and nss-pem security and bug fix update nss-pem-1.0.3-5.el7.i686.rpmLinux
(RHSA-2018:3157) curl and nss-pem security and bug fix update nss-pem-1.0.3-5.el7.x86_64.rpmLinux
Nss-pem update (ELSA-2018-3157) nss-pem-1.0.3-5.el7.x86_64.rpmLinux
Nss-pem update (ELSA-2018-3157) nss-pem-1.0.3-5.el7.i686.rpmLinux
(RHSA-2018:3157)Moderate: and nss-pem security and bug fix update curl-7.29.0-51.el7.x86_64.rpmLinux
(RHSA-2018:3157)Moderate: and nss-pem security and bug fix update curl-debuginfo-7.29.0-51.el7.i686.rpmLinux
(RHSA-2018:3157)Moderate: and nss-pem security and bug fix update curl-debuginfo-7.29.0-51.el7.x86_64.rpmLinux
(RHSA-2018:3157)Moderate: and nss-pem security and bug fix update libcurl-7.29.0-51.el7.i686.rpmLinux
(RHSA-2018:3157)Moderate: and nss-pem security and bug fix update libcurl-7.29.0-51.el7.x86_64.rpmLinux
(RHSA-2018:3157)Moderate: and nss-pem security and bug fix update libcurl-devel-7.29.0-51.el7.i686.rpmLinux
(RHSA-2018:3157)Moderate: and nss-pem security and bug fix update libcurl-devel-7.29.0-51.el7.x86_64.rpmLinux
(RHSA-2018:3157)Moderate: and nss-pem security and bug fix update nss-pem-debuginfo-1.0.3-5.el7.i686.rpmLinux
(RHSA-2018:3157)Moderate: and nss-pem security and bug fix update nss-pem-debuginfo-1.0.3-5.el7.x86_64.rpmLinux
nss-pem Security Update (ALAS-2019-1139) nss-pem-1.0.3-5.amzn2.i686.rpmLinux
nss-pem Security Update (ALAS-2019-1139) nss-pem-1.0.3-5.amzn2.x86_64.rpmLinux
Out-of-bounds Read Vulnerability (CVE-2018-1000301)NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234