NVD

Id
38270  
Name
CVE-2013-2174  
Description
Heap-based buffer overflow in the curl_easy_unescape function in lib/escape.c in cURL and libcurl 7.7 through 7.30.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted string ending in a "%" (percent) character.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-07-31  
Modified Date
2016-11-28  
Seq
2013-2174  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
195715 38270 CVE-2013-2174 http://curl.haxx.se/docs/adv_20130622.html  View
195716 38270 CVE-2013-2174 openSUSE-SU-2013:1133  View
195717 38270 CVE-2013-2174 RHSA-2013:0983  View
195718 38270 CVE-2013-2174 DSA-2713  View
195719 38270 CVE-2013-2174 http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html  View
195720 38270 CVE-2013-2174 http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html  View
195721 38270 CVE-2013-2174 60737  View
195722 38270 CVE-2013-2174 USN-1894-1  View
195723 38270 CVE-2013-2174 https://github.com/bagder/curl/commit/192c4f788d48f82c03e9cef40013f34370e90737  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
22031 JVNDB-2013-003606 cURL および libcurl の lib/escape.c におけるヒープベースのバッファオーバーフローの脆弱性 cURL および libcurl の lib/escape.c 内の curl_easy_unescape 関数には、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2013-2174 62116 CVE-2013-2174 38270 6.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003606.html 2013-06-22 2015-07-29 View