Critical DSA-4136-1 3 CVEs

curl - security update

Published Mar 14, 2018 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 8	curl	7.38.0-4+deb8u10
Debian · 9	curl	7.52.1-5+deb9u5

Vulnerabilities 3

Critical 9.8

CVE-2018-1000120 EPSS 12%

curl FTP path confusion leads to NIL byte out of bounds write

A buffer overflow exists in curl 7.12.3 to and including curl 7.58.0 in the FTP URL handling that allows an attacker to cause a denial of service or worse.

curl curl curl curl Debian Ubuntu Alpine NuGet

Mar 14, 2018
Unscored —

CVE-2018-1000121

A NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code that allows an attacker …

curl curl curl Debian Ubuntu Alpine

Mar 14, 2018
Unscored —

CVE-2018-1000122

A buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling code that allows an atta…

curl curl curl Debian Ubuntu Alpine

Mar 14, 2018