CVE-2017-8818
Fixed in a distro release EPSS 3%
curl and libcurl before 7.57.0 on 32-bit platforms allow attackers to cause a denial of service (out-of-bounds access and application crash) or possibly have unspecified other impact because too little memory is allocated for interfacing to an SSL library.
Products: haxx curl, haxx libcurl
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | curl | 7.57.0-r0 |
| Alpine 3.11 | curl | 7.57.0-r0 |
| Alpine 3.12 | curl | 7.57.0-r0 |
| Alpine 3.13 | curl | 7.57.0-r0 |
| Alpine 3.14 | curl | 7.57.0-r0 |
| Alpine 3.15 | curl | 7.57.0-r0 |
| Alpine 3.16 | curl | 7.57.0-r0 |
| Alpine 3.17 | curl | 7.57.0-r0 |
| Alpine 3.18 | curl | 7.57.0-r0 |
| Alpine 3.19 | curl | 7.57.0-r0 |
| Alpine 3.20 | curl | 7.57.0-r0 |
| Alpine 3.21 | curl | 7.57.0-r0 |
| Alpine 3.22 | curl | 7.57.0-r0 |
| Alpine 3.23 | curl | 7.57.0-r0 |
| Alpine 3.24 | curl | 7.57.0-r0 |
| Alpine 3.4 | curl | 7.57.0-r0 |
| Alpine 3.5 | curl | 7.57.0-r0 |
| Alpine 3.6 | curl | 7.57.0-r0 |
| Alpine 3.7 | curl | 7.57.0-r0 |
| Alpine 3.8 | curl | 7.57.0-r0 |
| Alpine 3.9 | curl | 7.57.0-r0 |
| Amazon Linux 2 | curl | 7.61.1-9.amzn2.0.1 |
| Amazon Linux 2 | libcurl | 7.61.1-9.amzn2.0.1 |
| Amazon Linux 2 | libcurl-devel | 7.61.1-9.amzn2.0.1 |
| Arch Linux | lib32-curl | 7.57.0-1 |
| Arch Linux | lib32-libcurl-compat | 7.57.0-1 |
| Arch Linux | lib32-libcurl-gnutls | 7.57.0-1 |
| Debian 12 | curl | 7.57.0-1 |
| Debian 13 | curl | 7.57.0-1 |
| Debian 14 | curl | 7.57.0-1 |
| openSUSE Tumbleweed | curl | 7.79.1-1.1 |