cURL CVE-2018-1000301 Information Disclosure Vulnerability

Bugtraq ID:	104225
Class:	Unknown
CVE:	CVE-2018-1000301
Remote:	Yes
Local:	No
Published:	May 16 2018 12:00AM
Updated:	May 16 2018 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Redhat JBoss Web Server (JWS) 3.0 Redhat Enterprise Linux 7 Redhat Collections for Red Hat Enterprise Linux 0 Haxx Curl 7.59 Haxx Curl 7.58 Haxx Curl 7.56.1 Haxx Curl 7.56 Haxx Curl 7.55.1 Haxx Curl 7.55 Haxx Curl 7.54.1 Haxx Curl 7.54 Haxx Curl 7.53.1 Haxx Curl 7.53 Haxx Curl 7.52 Haxx Curl 7.51 Haxx Curl 7.50.3 Haxx Curl 7.50 Haxx Curl 7.47 Haxx Curl 7.46 Haxx Curl 7.45 Haxx Curl 7.43 Haxx Curl 7.42.1 Haxx Curl 7.36 Haxx Curl 7.34 Haxx Curl 7.33 Haxx Curl 7.32 Haxx Curl 7.31 Haxx Curl 7.30 Haxx Curl 7.23 Haxx Curl 7.22 Haxx Curl 7.21 Haxx Curl 7.20 Haxx Curl 7.57.0 Haxx Curl 7.52.1 Haxx Curl 7.50.1 Haxx Curl 7.49.0 Haxx Curl 7.48.0 Haxx Curl 7.42.0 Haxx Curl 7.41.0 Haxx Curl 7.40.0 Haxx Curl 7.39.0 Haxx Curl 7.38.0 Haxx Curl 7.37.1 Haxx Curl 7.35.0 Haxx Curl 7.29.0 Haxx Curl 7.23.1 Haxx Curl 7.21.7 Haxx Curl 7.21.6 Haxx Curl 7.21.5 Haxx Curl 7.21.4 Haxx Curl 7.21.3 Haxx Curl 7.21.2 Haxx Curl 7.21.1
Not Vulnerable:	Haxx Curl 7.60

cURL CVE-2018-1000301 Information Disclosure Vulnerability

cURL is prone to an information-disclosure vulnerability.

Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Failed attempts will likely result in denial-of-service conditions.

cURL 7.20.0 through 7.59.0 are vulnerable.

cURL CVE-2018-1000301 Information Disclosure Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

cURL CVE-2018-1000301 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.