cURL/libcURL 'b/lib/url.c' Heap Based Buffer Overflow Vulnerability

Bugtraq ID:	99120
Class:	Boundary Condition Error
CVE:	CVE-2017-9502
Remote:	No
Local:	Yes
Published:	Jun 14 2017 12:00AM
Updated:	Jun 14 2017 12:00AM
Credit:	Marcel Raad
Vulnerable:	Haxx Libcurl 7.54 Haxx Libcurl 7.53.1 Haxx Libcurl 7.53 Haxx Curl 7.54 Haxx Curl 7.53.1 Haxx Curl 7.53
Not Vulnerable:	Haxx Libcurl 7.54.1 Haxx Curl 7.54.1

cURL/libcURL 'b/lib/url.c' Heap Based Buffer Overflow Vulnerability

cURL/libcURL is prone to a local heap-based buffer-overflow vulnerability.

Attackers can exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will result in denial-of-service conditions.

cURL/libcURL 'b/lib/url.c' Heap Based Buffer Overflow Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

cURL/libcURL 'b/lib/url.c' Heap Based Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

cURL/libcURL 'b/lib/url.c' Heap Based Buffer Overflow Vulnerability

References:

• Bug 1461321 - (CVE-2017-9502) CVE-2017-9502 curl: URL file scheme drive letter b (Redhat)
  
• Curl Home Page (Daniel Stenberg)
  
• CVE-2017-9502 (Red Hat Bugzilla)
  
• URL file scheme drive letter buffer overflow (cURL)
  
• url: Fix parsing for when 'file' is the default protocol (cURL)