CVE Catalog

CVE-2017-8816

Critical
Published: Translated: NVD NIST

Summary

The NTLM authentication feature in curl and libcurl before version 7.57.0 on 32-bit platforms allows attackers to cause a denial of service through integer overflow and resultant buffer overflow, leading to application crash.

Risk Assessment

Organizations may experience downtime and potential unspecified security impacts, affecting service availability.

Recommendation

It is recommended to upgrade curl and libcurl to version 7.57.0 or newer to mitigate this vulnerability.

Original NVD description (English source)

The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denial of service (integer overflow and resultant buffer overflow, and application crash) or possibly have unspecified other impact via vectors involving long user and password fields.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS