CVE-2010-0734: Buffer Overflow
A stack based buffer overflow flaw was found in the way libcurl used to uncompress zlib compressed data. If an application, using libcurl, was downloading compressed content over HTTP and asked libcurl to automatically uncompress data, it might lead to denial of service (application crash) or, potentially, to arbitrary code execution with the privileges of that application.
Upstream advisory: [1] http://curl.haxx.se/docs/adv20100209.html
Upstream patch: [2] http://curl.haxx.se/libcurl-contentencoding.patch
Affected versions of cURL/libCURL (from [1]): 7.10.5 to and including 7.19.7
Other references: [3] http://curl.haxx.se/docs/security.html#20100209 [4] http://curl.haxx.se/download.html
CVE Request: [5] http://www.openwall.com/lists/oss-security/2010/02/09/5
Acknowledgements:
Red Hat would like to thank Daniel Stenberg for responsibly reporting this issue. Upstream acknowledges Wesley Miaw as the original reporter.
Other sources
contentencoding.c in libcurl 7.10.5 through 7.19.7, when zlib is enabled, does not properly restrict the amount of callback data sent to an application that requests automatic decompression, which might allow remote attackers to cause a denial of service (application crash) or have unspecified other impact by sending crafted compressed data to an application that relies on the intended data-length limit.
— Red Hat
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2010-0734?
CVE-2010-0734 has a medium severity level due to potential denial of service vulnerabilities.
How do I fix CVE-2010-0734?
To fix CVE-2010-0734, upgrade libcurl to version 7.10.6 or later for affected versions.
Which versions of libcurl are affected by CVE-2010-0734?
CVE-2010-0734 affects libcurl versions from 7.10.5 through 7.19.7 when zlib is enabled.
What kind of attack can exploit CVE-2010-0734?
Malicious users can exploit CVE-2010-0734 to perform denial of service attacks that may crash the application.
Is the issue in CVE-2010-0734 specific to certain operating systems?
CVE-2010-0734 primarily affects systems using vulnerable versions of libcurl across various operating systems.