Lack of data validation - Path Traversal In curl
Description
libcurl's ASN1 parser code has the GTime2str() function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the parser might end up using -1 for the length of the time fraction, leading to a strlen() getting performed on a pointer to a heap buffer area that is not (purposely) null terminated. This flaw most likely leads to a crash, but can also lead to heap contents getting returned to the application when CURLINFO_CERTINFO is used.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 debian 12 | 7.88.1-10+deb12u7 | ||
debian 14 | 8.9.1-1 | ||
 alpine v3.19 | 8.9.1-r0 | ||
alpine v3.20 | 8.9.1-r0 | ||
alpine v3.21 | 8.9.1-r0 | ||
alpine v3.18 | 8.9.1-r0 | ||
alpine v3.22 | 8.9.1-r0 | ||
debian 13 | 8.9.1-1 | ||
alpine v3.23 | 8.9.1-r0 | ||
 rpm rhel9 | 0:8.0.41-2.el9_5 |
1-10 of 18
10
Aliases