Medium DSA-4331-1 2 CVEs

curl - security update

Published Nov 2, 2018 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 9	curl	7.52.1-5+deb9u8

Vulnerabilities 2

Medium 4.4

CVE-2018-16842

Curl versions 7.14.1 through 7.61.1 are vulnerable to a heap-based buffer over-read in the tool_msgs.c:voutf() function…

The curl Project curl curl curl Debian Ubuntu Alpine

Oct 31, 2018
Medium 4.3

CVE-2018-16839

Curl versions 7.33.0 through 7.61.1 are vulnerable to a buffer overrun in the SASL authentication code that may lead to…

The curl Project curl curl curl Debian Ubuntu Alpine

Oct 31, 2018