Required CVE Record Information
Description
Curl versions 7.33.0 through 7.61.1 are vulnerable to a buffer overrun in the SASL authentication code that may lead to denial of service.
CVSS 1 Total
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 4.3 | MEDIUM | 3.0 | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L |
References 9 Total
- security.gentoo.org: GLSA-201903-03 vendor-advisory
- debian.org: DSA-4331 vendor-advisory
- lists.debian.org: [debian-lts-announce] 20181106 [SECURITY] [DLA 1568-1] curl security update mailing-list
- https://curl.haxx.se/docs/CVE-2018-16839.html
- https://github.com/curl/curl/commit/f3a24d7916b9173c69a3e0ee790102993833d6c5
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16839
- securitytracker.com: 1042012 vdb-entry
- usn.ubuntu.com: USN-3805-1 vendor-advisory
- lists.apache.org: [infra-devnull] 20190404 [GitHub] [incubator-openwhisk-runtime-ballerina] falkzoll commented on issue #15: Update to new base image jdk8u202-b08_openj9-0.12.1. mailing-list
Updated:
This container includes required additional information provided by the CVE Program for this vulnerability.
References 9 Total
- security.gentoo.org: GLSA-201903-03 vendor-advisoryx_transferred
- debian.org: DSA-4331 vendor-advisoryx_transferred
- lists.debian.org: [debian-lts-announce] 20181106 [SECURITY] [DLA 1568-1] curl security update mailing-listx_transferred
- https://curl.haxx.se/docs/CVE-2018-16839.html x_transferred
- https://github.com/curl/curl/commit/f3a24d7916b9173c69a3e0ee790102993833d6c5 x_transferred
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16839 x_transferred
- securitytracker.com: 1042012 vdb-entryx_transferred
- usn.ubuntu.com: USN-3805-1 vendor-advisoryx_transferred
- lists.apache.org: [infra-devnull] 20190404 [GitHub] [incubator-openwhisk-runtime-ballerina] falkzoll commented on issue #15: Update to new base image jdk8u202-b08_openj9-0.12.1. mailing-listx_transferred