Summary
Brian Carpenter discovered that curl incorrectly handled IMAP FETCH
response lines. A remote attacker could use this issue to cause curl to
crash, resulting in a denial of service, or possibly execute arbitrary
code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | curl | 7.35.0-1ubuntu2.12 |
| Ubuntu · 16.04 LTS 16.04:LTS | curl | 7.47.0-1ubuntu2.4 |
Vulnerabilities 1
-
Critical 9.1
An IMAP FETCH response line indicates the size of the returned data, in number of bytes. When that response says the da…
References
-
report
https://ubuntu.com/security/CVE-2017-1000257