Total vulnerabilities in the database
The smb_request_state function in cURL and libcurl 7.40.0 through 7.42.1 allows remote SMB servers to obtain sensitive information from memory or cause a denial of service (out-of-bounds read and crash) via crafted length and offset values.
| Software | From | Fixed in |
|---|---|---|
| haxx / curl | 7.40.0 | 7.40.0.x |
| haxx / libcurl | 7.40.0 | 7.40.0.x |
| haxx / curl | 7.42.0 | 7.42.0.x |
| haxx / libcurl | 7.42.1 | 7.42.1.x |
| haxx / libcurl | 7.41.0 | 7.41.0.x |
| haxx / curl | 7.42.1 | 7.42.1.x |
| haxx / curl | 7.41.0 | 7.41.0.x |
| haxx / libcurl | 7.42.0 | 7.42.0.x |
| hp / system_management_homepage | - | 7.5.3.1.x |
| oracle / enterprise_manager_ops_center | 12.2.2 | 12.2.2.x |
| oracle / glassfish_server | 3.1.2 | 3.1.2.x |
| oracle / enterprise_manager_ops_center | 12.3.2 | 12.3.2.x |
| oracle / glassfish_server | 3.0.1 | 3.0.1.x |
| oracle / enterprise_manager_ops_center | 12.1.4 | 12.1.4.x |