cURL: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen

Summary

Product

Vulnerabilities 3

• Medium 6.5
  CVE-2017-1000100

  When doing a TFTP transfer and curl/libcurl is given a URL that contains a very long file name (longer than about 515 b…

  curl curl curl Debian Ubuntu Alpine
  Oct 4, 2017
• Medium 6.5
  CVE-2017-1000101

  curl supports "globbing" of URLs, in which a user can pass a numerical range to have the tool iterate over those number…

  curl curl curl Debian Ubuntu Alpine
  Oct 4, 2017
• Unscored —
  CVE-2017-1000099

  When asking to get a file from a file:// URL, libcurl provides a feature that outputs meta-data about the file using HT…

  curl Alpine
  Oct 4, 2017

Revision history

1. 2023-07-04 #12

   Neue Updates von Dell aufgenommen

2. 2018-11-13 #11

   New remediations available

3. 2018-07-31 #10

   New remediations available

4. 2017-10-23 #9

   New remediations available

5. 2017-10-10 #8

   New remediations available

6. 2017-10-08 #7

   New remediations available

7. 2017-09-14 #6

   New remediations available

8. 2017-09-05 #5

   New remediations available

9. 2017-08-31 #4

   New remediations available

10. 2017-08-13 #3

    Added references

11. 2017-08-08 #1

    Initial Release

12. 2017-08-08 #2

    Version nicht vorhanden

References

• Security update for Dell NetWorker
  https://www.dell.com/support/kbdoc/de-de/000215497/dsa-2023-233-security-update-for-dell-networker-curl-7-51-0
• Curl Security Advisory vom 2017-08-08
  https://curl.haxx.se/docs/adv_20170809A.html
• Curl Security Advisory vom 2017-08-08
  https://curl.haxx.se/docs/adv_20170809B.html
• Curl Security Advisory vom 2017-08-08
  https://curl.haxx.se/docs/adv_20170809C.html
• Eintrag in der OSS Mailing Liste vom 2017-08-08
  http://marc.info/?l=oss-security&m=150225896624622&w=2
• SUSE Security Update SUSE-SU-2017:2174-1 vom 2017-08-16
  https://www.suse.com/support/update/announcement/2017/suse-su-20172174-1.html
• SUSE Security Update SUSE-SU-2017:2312-1 vom 2017-08-31
  https://www.suse.com/support/update/announcement/2017/suse-su-20172312-1.html
• SUSE Security Update SUSE-SU-2017:2354-1 vom 2017-09-06
  https://www.suse.com/support/update/announcement/2017/suse-su-20172354-1.html
• SUSE Security Update SUSE-SU-2017:2470-1 vom 2017-09-15
  https://www.suse.com/support/update/announcement/2017/suse-su-20172470-1.html
• Debian Security Advisory DSA-3992 vom 2017-10-07
  https://www.debian.org/security/2017/dsa-3992
• Ubuntu Security Notice USN-3441-1 vom 2017-10-10
  http://www.ubuntu.com/usn/usn-3441-1/
• Ubuntu Security Notice USN-3441-2 vom 2017-10-24
  http://www.ubuntu.com/usn/usn-3441-2/
• Juniper Security Bulletin: JSA10874
  https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10874&actp=RSS
• Red Hat Security Advisory RHSA-2018:3558 vom 2018-11-14
  https://access.redhat.com/errata/RHSA-2018:3558