CVE-2018-16890

Description

libcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read. The function handling incoming NTLM type-2 messages (`lib/vauth/ntlm.c:ntlm_decode_type2_target`) does not validate incoming data correctly and is subject to an integer overflow vulnerability. Using that overflow, a malicious or broken NTLM server could trick libcurl to accept a bad length + offset combination that would lead to a buffer read out-of-bounds.

Related CPE's

References

https://curl.haxx.se/docs/CVE-2018-16890.html

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16890

DSA-4386

USN-3882-1

106947

https://security.netapp.com/advisory/ntap-20190315-0001/

[infra-devnull] 20190404 [GitHub] [incubator-openwhisk-runtime-ballerina] falkzoll commented on issue #15: Update to new base image jdk8u202-b08_openj9-0.12.1.

https://cert-portal.siemens.com/productcert/pdf/ssa-436177.pdf

https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html

https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html

https://support.f5.com/csp/article/K03314397?utm_source=f5support&utm_medium=RSS

RHSA-2019:3701

CvssV3 impact

CvssV2 impact