CVE-2018-1000120 | SynScan

Vulnerability Database

289,598

Total vulnerabilities in the database

CVE-2018-1000120

A buffer overflow exists in curl 7.12.3 to and including curl 7.58.0 in the FTP URL handling that allows an attacker to cause a denial of service or worse.

Published: Mar 14, 2018
Updated: May 9, 2024
CVE: CVE-2018-1000120
GHSA: GHSA-674j-7m97-j2p9
Severity: Critical
Exploit:

CVSS v3:

Severity: Critical
Score: 9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs:

CWE-787

Affected Software
References

Software	From	Fixed in
debian / debian_linux	8.0	8.0.x
debian / debian_linux	7.0	7.0.x
debian / debian_linux	9.0	9.0.x
canonical / ubuntu_linux	16.04	16.04.x
canonical / ubuntu_linux	14.04	14.04.x
canonical / ubuntu_linux	12.04	12.04.x
canonical / ubuntu_linux	17.10	17.10.x
haxx / curl	7.12.3	7.58.0.x
redhat / enterprise_linux_desktop	7.0	7.0.x
redhat / enterprise_linux_workstation	7.0	7.0.x
redhat / enterprise_linux_server	7.0	7.0.x
oracle / enterprise_manager_ops_center	12.2.2	12.2.2.x
oracle / peoplesoft_enterprise_peopletools	8.55	8.55.x
oracle / peoplesoft_enterprise_peopletools	8.56	8.56.x
oracle / enterprise_manager_ops_center	12.3.3	12.3.3.x
oracle / peoplesoft_enterprise_peopletools	8.57	8.57.x
oracle / communications_webrtc_session_controller	-	7.2
curl	7.12.3	-