CVE-2017-1000099

When asking to get a file from a file:// URL, libcurl provides a feature that outputs meta-data about the file using HTTP-like headers. The code doing this would send the wrong buffer to the user (stdout or the application's provide callback), which could lead to other private data from the heap to get inadvertently displayed. The wrong buffer was an uninitialized memory area allocated on the heap and if it turned out to not contain any zero byte, it would continue and display the data following that buffer in memory.

References

Affected packages

Git / github.com/curl/curl

Affected ranges

Type

GIT

Repo

https://github.com/curl/curl

Events

Introduced

54b636f14546d3fde9f9c67c3b32701d78563161

Last affected

54b636f14546d3fde9f9c67c3b32701d78563161

Database specific

{
    "source": "CPE_STRING",
    "cpe": "cpe:2.3:a:haxx:libcurl:7.54.1:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "7.54.1"
        },
        {
            "last_affected": "7.54.1"
        }
    ]
}

Affected versions

7.*

7.54.1

Other

curl-7_54_1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1000099.json"