CVE-2017-8817

Critical

Published: 29/11/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The FTP wildcard function in curl and libcurl before version 7.57.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) or possibly have unspecified other impact via a string that ends with an '[' character.

Risk Assessment

Organizations may be exposed to attacks that lead to application crashes, affecting service availability. There is also a risk of unspecified impact on systems.

Recommendation

It is recommended to update curl and libcurl to version 7.57.0 or later to mitigate this vulnerability.

Original NVD description (English source)

The FTP wildcard function in curl and libcurl before 7.57.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) or possibly have unspecified other impact via a string that ends with an '[' character.