CVE-2019-3823

Publication date 6 February 2019

Last updated 24 July 2024

Ubuntu priority

Cvss 3 Severity Score

libcurl versions from 7.34.0 to before 7.64.0 are vulnerable to a heap out-of-bounds read in the code handling the end-of-response for SMTP. If the buffer passed to `smtp_endofresp()` isn't NUL terminated and contains no character ending the parsed number, and `len` is set to 5, then the `strtol()` call reads beyond the allocated buffer. The read contents will not be returned to the caller.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
curl	21.04 hirsute	Fixed 7.64.0-1ubuntu1
	20.10 groovy	Fixed 7.64.0-1ubuntu1
	20.04 LTS focal	Fixed 7.64.0-1ubuntu1
	19.10 eoan	Fixed 7.64.0-1ubuntu1
	19.04 disco	Fixed 7.64.0-1ubuntu1
	18.10 cosmic	Fixed 7.61.0-1ubuntu2.3
	18.04 LTS bionic	Fixed 7.58.0-2ubuntu3.6
	16.04 LTS xenial	Fixed 7.47.0-1ubuntu2.12
	14.04 LTS trusty	Fixed 7.35.0-1ubuntu2.20

Severity score breakdown

Parameter	Value
Base score	7.5 · High
Attack vector	Network
Attack complexity	Low
Privileges required	None
User interaction	None
Scope	Unchanged
Confidentiality	None
Integrity impact	None
Availability impact	High
Vector	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References

Related Ubuntu Security Notices (USN)