CVE Catalog

CVE-2017-8818

Critical
Published: Translated: NVD NIST

Summary

Versions of curl and libcurl before 7.57.0 on 32-bit platforms allow attackers to cause a denial of service through out-of-bounds access, leading to application crashes.

Risk Assessment

Organizations may experience service interruptions and potential unspecified impacts related to interfacing with the SSL library.

Recommendation

It is recommended to upgrade curl and libcurl to version 7.57.0 or later to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

curl and libcurl before 7.57.0 on 32-bit platforms allow attackers to cause a denial of service (out-of-bounds access and application crash) or possibly have unspecified other impact because too little memory is allocated for interfacing to an SSL library.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS