CVE-2018-1000300
Published: 16 May 2018
curl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer Overflow vulnerability in denial of service and more that can result in curl might overflow a heap based memory buffer when closing down an FTP connection with very long server command replies.. This vulnerability appears to have been fixed in curl < 7.54.1 and curl >= 7.60.0.
Notes
| Author | Note |
|---|---|
| mdeslaur | curl 7.54.1 to and including curl 7.59.0 introduced by https://github.com/curl/curl/commit/e40e9d7f0decc79 |
Priority
CVSS 3 base score: 9.8