CVE-2016-8617

Published: 02 November 2016

The base64 encode function in curl before version 7.51.0 is prone to a buffer being under allocated in 32bit systems if it receives at least 1Gb as input via `CURLOPT_USERNAME`.

Priority

Medium

CVSS 3 base score: 7.0

Status

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8617
• https://curl.haxx.se/docs/adv_20161102C.html
• https://ubuntu.com/security/notices/USN-3123-1
• NVD
• Launchpad
• Debian