Curl CVE-2017-1000254 Out of Bounds Read Denial of Service Vulnerability
BID:101115
CVE-2017-1000254 |Info
Curl CVE-2017-1000254 Out of Bounds Read Denial of Service Vulnerability
| Bugtraq ID: | 101115 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2017-1000254 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 04 2017 12:00AM |
| Updated: | Oct 09 2017 12:02PM |
| Credit: | Daniel Stenberg |
| Vulnerable: |
Redhat Enterprise Linux 7 Redhat Enterprise Linux 6 Redhat Enterprise Linux 5 Haxx Libcurl 7.55.1 Haxx Libcurl 7.54.1 Haxx Libcurl 7.54 Haxx Libcurl 7.53.1 Haxx Libcurl 7.53 Haxx Libcurl 7.52 Haxx Libcurl 7.51 Haxx Libcurl 7.50.3 Haxx Libcurl 7.50.2 Haxx Libcurl 7.50.1 Haxx Libcurl 7.50 Haxx Libcurl 7.47 Haxx Libcurl 7.46 Haxx Libcurl 7.43 Haxx Libcurl 7.42.1 Haxx Libcurl 7.36 Haxx Libcurl 7.34 Haxx Libcurl 7.33 Haxx Libcurl 7.32 Haxx Libcurl 7.31 Haxx Libcurl 7.30 Haxx Libcurl 7.25 Haxx Libcurl 7.23 Haxx Libcurl 7.22 Haxx Libcurl 7.21 Haxx Libcurl 7.20 Haxx Libcurl 7.19.6 Haxx Libcurl 7.19.5 Haxx Libcurl 7.19.4 Haxx Libcurl 7.19.3 Haxx Libcurl 7.18.1 Haxx Libcurl 7.18 Haxx Libcurl 7.17 Haxx Libcurl 7.16.4 Haxx Libcurl 7.15.5 Haxx Libcurl 7.15.3 Haxx Libcurl 7.15.2 Haxx Libcurl 7.15.1 Haxx Libcurl 7.15 Haxx Libcurl 7.14.1 Haxx Libcurl 7.14 Haxx Libcurl 7.13.2 Haxx Libcurl 7.13.1 Haxx Libcurl 7.13 Haxx Libcurl 7.12.3 Haxx Libcurl 7.12.2 Haxx Libcurl 7.12.1 Haxx Libcurl 7.12 Haxx Libcurl 7.11.2 Haxx Libcurl 7.11.1 Haxx Libcurl 7.11 Haxx Libcurl 7.10.8 Haxx Libcurl 7.10.7 Haxx Libcurl 7.10.6 Haxx Libcurl 7.10.5 Haxx Libcurl 7.10.4 Haxx Libcurl 7.10.3 Haxx Libcurl 7.10.2 Haxx Libcurl 7.10.1 Haxx Libcurl 7.9.8 Haxx Libcurl 7.9.7 Haxx Libcurl 7.9.6 Haxx Libcurl 7.9.5 Haxx Libcurl 7.9.3 Haxx Libcurl 7.9.2 Haxx Libcurl 7.9.1 Haxx Libcurl 7.7.2 Haxx Libcurl 7.7.1 Haxx Libcurl 7.9.4 Haxx Libcurl 7.9 Haxx Libcurl 7.8.1 Haxx Libcurl 7.8 Haxx Libcurl 7.7.3 Haxx Libcurl 7.55.0 Haxx Libcurl 7.52.1 Haxx Libcurl 7.49.0 Haxx Libcurl 7.48.0 Haxx Libcurl 7.42.0 Haxx Libcurl 7.41.0 Haxx Libcurl 7.40.0 Haxx Libcurl 7.39 Haxx Libcurl 7.38.0 Haxx Libcurl 7.37.1 Haxx Libcurl 7.37.0 Haxx Libcurl 7.35.0 Haxx Libcurl 7.29.0 Haxx Libcurl 7.28.1 Haxx Libcurl 7.28.0 Haxx Libcurl 7.27.0 Haxx Libcurl 7.26.0 Haxx Libcurl 7.24.0 Haxx Libcurl 7.23.1 Haxx Libcurl 7.21.7 Haxx Libcurl 7.21.6 Haxx Libcurl 7.21.5 Haxx Libcurl 7.21.4 Haxx Libcurl 7.21.3 Haxx Libcurl 7.21.2 Haxx Libcurl 7.21.1 Haxx Libcurl 7.19.7 Haxx Libcurl 7.19.2 Haxx Libcurl 7.19.1 Haxx Libcurl 7.19.0 Haxx Libcurl 7.18.2 Haxx Libcurl 7.17.1 Haxx Libcurl 7.16.3 Haxx Libcurl 7.16.2 Haxx Libcurl 7.16.1 Haxx Libcurl 7.16.0 Haxx Libcurl 7.15.4 Haxx Libcurl 7.10 Haxx Curl 7.55.1 Haxx Curl 7.55 Haxx Curl 7.54.1 Haxx Curl 7.54 Haxx Curl 7.53.1 Haxx Curl 7.53 Haxx Curl 7.52 Haxx Curl 7.51 Haxx Curl 7.50.3 Haxx Curl 7.50 Haxx Curl 7.47 Haxx Curl 7.46 Haxx Curl 7.45 Haxx Curl 7.43 Haxx Curl 7.42.1 Haxx Curl 7.36 Haxx Curl 7.34 Haxx Curl 7.33 Haxx Curl 7.32 Haxx Curl 7.31 Haxx Curl 7.30 Haxx Curl 7.25 Haxx Curl 7.23 Haxx Curl 7.22 Haxx Curl 7.21 Haxx Curl 7.20 Haxx Curl 7.19.6 Haxx Curl 7.19.5 Haxx Curl 7.19.4 Haxx Curl 7.19.3 Haxx Curl 7.18.1 Haxx Curl 7.18 Haxx Curl 7.17 Haxx Curl 7.16.4 Haxx Curl 7.15.5 Haxx Curl 7.15.3 Haxx Curl 7.15.2 Haxx Curl 7.15.1 Haxx Curl 7.15 Haxx Curl 7.14.1 Haxx Curl 7.14 Haxx Curl 7.13.2 Haxx Curl 7.13.1 Haxx Curl 7.13 Haxx Curl 7.12.3 Haxx Curl 7.12.2 Haxx Curl 7.12.1 Haxx Curl 7.12 Haxx Curl 7.11.2 Haxx Curl 7.11.1 Haxx Curl 7.11 Haxx Curl 7.10.8 Haxx Curl 7.10.7 Haxx Curl 7.10.6 Haxx Curl 7.10.5 Haxx Curl 7.10.4 Haxx Curl 7.10.3 Haxx Curl 7.10.2 Haxx Curl 7.10.1 Haxx Curl 7.9.8 Haxx Curl 7.9.7 Haxx Curl 7.9.6 Haxx Curl 7.9.5 Haxx Curl 7.9.3 Haxx Curl 7.9.2 Haxx Curl 7.9.1 Haxx Curl 7.7.2 Haxx Curl 7.7.1 Haxx Curl 7.9.4 Haxx Curl 7.9 Haxx Curl 7.8.1 Haxx Curl 7.8 Haxx Curl 7.7.3 Haxx Curl 7.52.1 Haxx Curl 7.50.1 Haxx Curl 7.5.2 Haxx Curl 7.5.1 Haxx Curl 7.49.0 Haxx Curl 7.48.0 Haxx Curl 7.42.0 Haxx Curl 7.41.0 Haxx Curl 7.40.0 Haxx Curl 7.39.0 Haxx Curl 7.38.0 Haxx Curl 7.37.1 Haxx Curl 7.35.0 Haxx Curl 7.29.0 Haxx Curl 7.28.1 Haxx Curl 7.28.0 Haxx Curl 7.27.0 Haxx Curl 7.26.0 Haxx Curl 7.24.0 Haxx Curl 7.23.1 Haxx Curl 7.21.7 Haxx Curl 7.21.6 Haxx Curl 7.21.5 Haxx Curl 7.21.4 Haxx Curl 7.21.3 Haxx Curl 7.21.2 Haxx Curl 7.21.1 Haxx Curl 7.2 Haxx Curl 7.19.7 Haxx Curl 7.19.2 Haxx Curl 7.19.1 Haxx Curl 7.19.0 Haxx Curl 7.18.2 Haxx Curl 7.17.1 Haxx Curl 7.16.3 Haxx Curl 7.16.2 Haxx Curl 7.16.1 Haxx Curl 7.16.0 Haxx Curl 7.15.4 Haxx Curl 7.10 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 |
| Not Vulnerable: |
Haxx Libcurl 7.56 Haxx Curl 7.56 |
Discussion
Curl CVE-2017-1000254 Out of Bounds Read Denial of Service Vulnerability
Curl is prone to a denial-of-service vulnerability.
An attacker may exploit this issue to cause a denial-of-service condition.
Curl/Libcurl versions 7.7 through 7.55.1 are vulnerable.https://curl.haxx.se/docs/vuln-7.55.1.html
Curl is prone to a denial-of-service vulnerability.
An attacker may exploit this issue to cause a denial-of-service condition.
Curl/Libcurl versions 7.7 through 7.55.1 are vulnerable.https://curl.haxx.se/docs/vuln-7.55.1.html
Exploit / POC
Curl CVE-2017-1000254 Out of Bounds Read Denial of Service Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Curl CVE-2017-1000254 Out of Bounds Read Denial of Service Vulnerability
References:
References:
- cURL homepage (Daniel Stenberg
) - Bug 1495541 - (CVE-2017-1000254) CVE-2017-1000254 curl: FTP PWD response parser (Redhat)
- CVE-2017-1000254 (Redhat)
- FTP PWD response parser out of bounds read (Haxx)