CVE

Id
93987  
CVE No.
CVE-2016-7167  
Status
Candidate  
Description
Multiple integer overflows in the (1) curl_escape, (2) curl_easy_escape, (3) curl_unescape, and (4) curl_easy_unescape functions in libcurl before 7.50.3 allow attackers to have unspecified impact via a string of length 0xffffffff, which triggers a heap-based buffer overflow.  
Phase
Assigned (20160908)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
795249 93987 CVE-2016-7167 CONFIRM:https://curl.haxx.se/docs/adv_20160914.html  View
795250 93987 CVE-2016-7167 FEDORA:FEDORA-2016-08533fc59c  View
795251 93987 CVE-2016-7167 URL:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/B3IU2FRXQNU6UJIQT4NGLWWTP2GJQXO7/  View
795252 93987 CVE-2016-7167 FEDORA:FEDORA-2016-7a2ed52d41  View
795253 93987 CVE-2016-7167 URL:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LTH54DFOS4TSYPG5XKJDGAG4XPAR4T7M/  View
795254 93987 CVE-2016-7167 FEDORA:FEDORA-2016-80f4f71eff  View
795255 93987 CVE-2016-7167 URL:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZMRWVISG7VUCYRMF23A2UHMYD72VQWAK/  View
795256 93987 CVE-2016-7167 SLACKWARE:SSA:2016-259-01  View
795257 93987 CVE-2016-7167 URL:http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.538632  View
795258 93987 CVE-2016-7167 BID:92975  View
795259 93987 CVE-2016-7167 URL:http://www.securityfocus.com/bid/92975  View
795260 93987 CVE-2016-7167 SECTRACK:1036813  View

Related JVN