CVE-2016-8622
9.8
CRITICAL
CVSS 3.1
EPSS 4.7%
描述
The URL percent-encoding decode function in libcurl before 7.51.0 is called `curl_easy_unescape`. Internally, even if this function would be made to allocate a unscape destination buffer larger than 2GB, it would return that new length in a signed 32 bit integer variable, thus the length would get either just truncated or both truncated and turned negative. That could then lead to libcurl writing outside of its heap based buffer.
如何修補 CVE-2016-8622
要修補 CVE-2016-8622,請將受影響套件升級到下列已修補版本。
- —升級至 7.51.0-r0 或更新版本
- —升級至 7.51.0-1 或更新版本
CVE-2016-8622 正在被利用嗎?
低 — EPSS 為 4.7%,目前沒有觀察到大規模利用活動。
受影響套件(2)
- from 0, < 7.51.0-r0
- from 0, < 7.51.0-1
CVSS 分數
| 來源 | 版本 | 嚴重程度 | 向量 |
|---|---|---|---|
| osv | CVSS 3.1 | CRITICAL9.8 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |