High USN-3765-1 1 CVE

curl vulnerability

Published Sep 17, 2018 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that curl incorrectly handled certain inputs.
An attacker could possibly use this to execute arbitrary code.

Fixed packages 3

Release	Package	Fixed in
Ubuntu · 14.04 LTS 14.04:LTS	curl	7.35.0-1ubuntu2.17
Ubuntu · 16.04 LTS 16.04:LTS	curl	7.47.0-1ubuntu2.9
Ubuntu · 18.04 LTS 18.04:LTS	curl	7.58.0-2ubuntu3.3

Vulnerabilities 1

High 7.5

CVE-2018-14618 EPSS 11%

curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Cur…

[UNKNOWN] curl curl curl Debian Ubuntu Alpine

Sep 5, 2018

References

report
https://ubuntu.com/security/CVE-2018-14618