Description
The smb_request_state function in cURL and libcurl 7.40.0 through 7.42.1 allows remote SMB servers to obtain sensitive information from memory or cause a denial of service (out-of-bounds read and crash) via crafted length and offset values.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | curl | 7.43.0-1 | — |
| Debian 13 | curl | 7.43.0-1 | — |
| Debian 12 | curl | 7.43.0-1 | — |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | curl | 7.51.0-1.1 | openSUSE-SU-2024:10303-1 |
Advisories 1
- openSUSE-SU-2024:10303-1 curl-7.51.0-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- FEDORA-2015-10155 vendor-advisory
- http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017
- http://curl.haxx.se/docs/adv_20150617B.html
- 1036371 vdb-entry
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
- 91787 vdb-entry
- GLSA-201509-02 vendor-advisory
- 75387 vdb-entry