Fluid Attacks Database

Description

When doing a second SMB request to the same host again, curl would wrongly use a data pointer pointing into already freed memory.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
alpine v3.24	curl	>=8.13.0 <8.19.0-r0	8.19.0-r0
rpm rhel9	snphost	-	-
rpm rhel10	s390utils	-	-
debian 14	curl	=8.14.1-2 \|\| =8.14.1-2+exp1 \|\| =8.15.0-1 \|\| =8.15.0-1~bpo13+1 \|\| =8.15.0-1~exp1 \|\| =8.15.0~rc1-1exp1 \|\| =8.15.0~rc2-1~exp1 \|\| =8.15.0~rc3-1~exp1 \|\| =8.16.0-1 \|\| =8.16.0-1+exp1 \|\| =8.16.0-1~bpo13+1 \|\| =8.16.0-2 \|\| =8.16.0-3 \|\| =8.16.0-4 \|\| =8.16.0-4~bpo13+1 \|\| =8.16.0~rc1-1~exp1 \|\| =8.16.0~rc2-1 \|\| =8.16.0~rc2-2 \|\| =8.16.0~rc3-1 \|\| =8.17.0-1 \|\| =8.17.0-2 \|\| =8.17.0-3 \|\| =8.17.0~rc1-1~exp1 \|\| =8.17.0~rc2-1 \|\| =8.17.0~rc3-1 \|\| =8.18.0-1 \|\| =8.18.0-1~bpo13+1 \|\| =8.18.0-2 \|\| =8.18.0~rc1-1+exp1 \|\| =8.18.0~rc2-1 \|\| =8.18.0~rc3-1 \|\| =8.19.0-1~bpo13+1 \|\| =8.19.0~rc1-1~exp1 \|\| =8.19.0~rc2-1 \|\| =8.19.0~rc2-2 \|\| =8.19.0~rc3-1 \|\| >=0 <8.19.0-1	8.19.0-1
rpm rhel10	snphost	-	-
rpm rhel10	trustee-guest-components	-	-
rpm rhel9	rust	-	-
rpm rhel10	trustee	-	-
rpm rhel9	trustee-guest-components	-	-
rpm rhel10	rust	-	-

1-10 of 12

Aliases

References

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.