Your submission was sent successfully! Close

CVE-2016-8617

Published: 2 November 2016

The base64 encode function in curl before version 7.51.0 is prone to a buffer being under allocated in 32bit systems if it receives at least 1Gb as input via `CURLOPT_USERNAME`.

Priority

Medium

CVSS 3 base score: 7.0

Status

Package Release Status
curl
Launchpad, Ubuntu, Debian
precise
Released (7.22.0-3ubuntu4.17)
trusty
Released (7.35.0-1ubuntu2.10)
upstream
Released (7.51.0)
xenial
Released (7.47.0-1ubuntu2.2)
yakkety
Released (7.50.1-1ubuntu1.1)
zesty
Released (7.50.1-1ubuntu2)