CURL-CVE-2018-1000121

Source

https://curl.se/docs/CVE-2018-1000121.html

Import Source

https://curl.se/docs/CURL-CVE-2018-1000121.json

Aliases

• CVE-2018-1000121

Published

2018-03-14T08:00:00Z

Modified

2024-01-25T02:42:48.061005Z

Summary

LDAP NULL pointer dereference

Details

curl might dereference a near-NULL address when getting an LDAP URL.

The function ldap_get_attribute_ber() is called to get attributes, but it turns out that it can return LDAP_SUCCESS and still return a NULL pointer in the result pointer when getting a particularly crafted response. This was a surprise to us and to the code.

libcurl-using applications that allow LDAP URLs, or that allow redirects to LDAP URLs could be made to crash by a malicious server.

References