CVE-2018-14618
curl - security update
描述
curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Curl_ntlm_core_mk_nt_hash multiplies the length of the password by two (SUM) to figure out how large temporary storage area to allocate from the heap. The length value is then subsequently used to iterate over the password and generate output into the allocated storage buffer. On systems with a 32 bit size_t, the math to calculate SUM triggers an integer overflow when the password length exceeds 2GB (2^31 bytes). This integer overflow usually causes a very small buffer to actually get allocated instead of the intended very huge one, making the use of that buffer end up in a heap buffer overflow. (This bug is almost identical to CVE-2017-8816.)
如何修補 CVE-2018-14618
要修補 CVE-2018-14618,請將受影響套件升級到下列已修補版本。
- —升級至 7.61.1-r0 或更新版本
- —升級至 7.62.0-1 或更新版本
- —升級至 7.38.0-4+deb8u12 或更新版本
- —升級至 7.52.1-5+deb9u7 或更新版本
CVE-2018-14618 正在被利用嗎?
中等 — EPSS 為 11.1%,可持續追蹤但非最高優先。
受影響套件(4)
- from 0, < 7.61.1-r0
- from 0, < 7.62.0-1
- from 0, < 7.38.0-4+deb8u12
- from 0, < 7.52.1-5+deb9u7
CVSS 分數
| 來源 | 版本 | 嚴重程度 | 向量 |
|---|---|---|---|
| osv | CVSS 3.1 | CRITICAL9.8 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |