CVE-2018-1000301 - CVE House
Back to Database
Status published Unknown CVE-2018-1000301

curl version curl 7.20.0 to and including curl 7.59.0 contains...

Vulnerability Description

curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded RTSP content.. This vulnerability appears to have been fixed in curl < 7.20.0 and curl >= 7.60.0.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-1000301

Credits & Attribution

No credits recorded in the NVD database.

References

More from debian

View All →
CVE-2022-48174
There is a stack overflow vulnerability in ash.c:6030 in busybox...
Critical 9.8
CVE-2021-38172
perM 0.4.0 has a Buffer Overflow related to strncpy. (Debian...
Critical 9.8
CVE-2021-36086
The CIL compiler in SELinux 3.2 has a use-after-free in...
Low 3.3
CVE-2021-31799
In RDoc 3.11 through 6.x before 6.3.1, as distributed with...
Unknown 0
CVE-2021-28374
The Debian courier-authlib package before 0.71.1-2 for Courier Authentication Library...
High 7.5

Affected Vendor

Affected Software

debian linux, ubuntu linux, curl, enterprise linux desktop, enterprise linux server, enterprise linux workstation, communications webrtc session controller, enterprise manager ops center, peoplesoft enterprise peopletools
Vulnerable Versions:
7.0, 8.0, 9.0, 12.04, 14.04, 16.04, 17.10, 18.04, 7.20.0, 0, 12.2.2, 12.3.3, 8.55, 8.56, 8.57

Timeline

Official Publish: May 24th, 2018
Last Modified: April 15th, 2026
Added to House: July 20th, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.