CVE-2017-1000100: Infoleak
First published: Fri Aug 04 2017(Updated: )
curl. An out-of-bounds read was addressed with improved bounds checking.
Credit: Even Rouault found by OSS-Fuzz cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple macOS High Sierra | <10.13.1 | 10.13.1 |
| Apple Sierra | ||
| Apple El Capitan | ||
| Haxx Libcurl | =7.15.0 | |
| Haxx Libcurl | =7.15.1 | |
| Haxx Libcurl | =7.15.2 | |
| Haxx Libcurl | =7.15.3 | |
| Haxx Libcurl | =7.15.4 | |
| Haxx Libcurl | =7.15.5 | |
| Haxx Libcurl | =7.16.0 | |
| Haxx Libcurl | =7.16.1 | |
| Haxx Libcurl | =7.16.2 | |
| Haxx Libcurl | =7.16.3 | |
| Haxx Libcurl | =7.16.4 | |
| Haxx Libcurl | =7.17.0 | |
| Haxx Libcurl | =7.17.1 | |
| Haxx Libcurl | =7.18.0 | |
| Haxx Libcurl | =7.18.1 | |
| Haxx Libcurl | =7.18.2 | |
| Haxx Libcurl | =7.19.0 | |
| Haxx Libcurl | =7.19.1 | |
| Haxx Libcurl | =7.19.2 | |
| Haxx Libcurl | =7.19.3 | |
| Haxx Libcurl | =7.19.4 | |
| Haxx Libcurl | =7.19.5 | |
| Haxx Libcurl | =7.19.6 | |
| Haxx Libcurl | =7.19.7 | |
| Haxx Libcurl | =7.20.0 | |
| Haxx Libcurl | =7.20.1 | |
| Haxx Libcurl | =7.21.0 | |
| Haxx Libcurl | =7.21.1 | |
| Haxx Libcurl | =7.21.2 | |
| Haxx Libcurl | =7.21.3 | |
| Haxx Libcurl | =7.21.4 | |
| Haxx Libcurl | =7.21.5 | |
| Haxx Libcurl | =7.21.6 | |
| Haxx Libcurl | =7.21.7 | |
| Haxx Libcurl | =7.22.0 | |
| Haxx Libcurl | =7.23.0 | |
| Haxx Libcurl | =7.23.1 | |
| Haxx Libcurl | =7.24.0 | |
| Haxx Libcurl | =7.25.0 | |
| Haxx Libcurl | =7.26.0 | |
| Haxx Libcurl | =7.27.0 | |
| Haxx Libcurl | =7.28.0 | |
| Haxx Libcurl | =7.28.1 | |
| Haxx Libcurl | =7.29.0 | |
| Haxx Libcurl | =7.30.0 | |
| Haxx Libcurl | =7.31.0 | |
| Haxx Libcurl | =7.32.0 | |
| Haxx Libcurl | =7.33.0 | |
| Haxx Libcurl | =7.34.0 | |
| Haxx Libcurl | =7.35.0 | |
| Haxx Libcurl | =7.36.0 | |
| Haxx Libcurl | =7.37.0 | |
| Haxx Libcurl | =7.37.1 | |
| Haxx Libcurl | =7.38.0 | |
| Haxx Libcurl | =7.39 | |
| Haxx Libcurl | =7.40.0 | |
| Haxx Libcurl | =7.41.0 | |
| Haxx Libcurl | =7.42.0 | |
| Haxx Libcurl | =7.42.1 | |
| Haxx Libcurl | =7.43.0 | |
| Haxx Libcurl | =7.44.0 | |
| Haxx Libcurl | =7.45.0 | |
| Haxx Libcurl | =7.46.0 | |
| Haxx Libcurl | =7.47.0 | |
| Haxx Libcurl | =7.47.1 | |
| Haxx Libcurl | =7.48.0 | |
| Haxx Libcurl | =7.49.0 | |
| Haxx Libcurl | =7.49.1 | |
| Haxx Libcurl | =7.50.0 | |
| Haxx Libcurl | =7.50.1 | |
| Haxx Libcurl | =7.50.2 | |
| Haxx Libcurl | =7.50.3 | |
| Haxx Libcurl | =7.51.0 | |
| Haxx Libcurl | =7.52.0 | |
| Haxx Libcurl | =7.52.1 | |
| Haxx Libcurl | =7.53.0 | |
| Haxx Libcurl | =7.53.1 | |
| Haxx Libcurl | =7.54.0 | |
| Haxx Libcurl | =7.54.1 | |
| redhat/curl | <7.55.0 | 7.55.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://support.apple.com/en-us/HT208221 (Advisory)
- http://www.debian.org/security/2017/dsa-3992
- http://www.securityfocus.com/bid/100286
- http://www.securitytracker.com/id/1039118
- https://access.redhat.com/errata/RHSA-2018:3558
- https://curl.haxx.se/docs/adv_20170809B.html
- https://security.gentoo.org/glsa/201709-14
- https://support.apple.com/HT208221
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=1308973&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=1308973&action=edit
- https://access.redhat.com/security/updates/classification/
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1479670
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1479668
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1479669
- https://bugzilla.redhat.com/show_bug.cgi?id=1478310
Peer vulnerabilities
(Found alongside the following vulnerabilities)
- CVE-2016-0736
- CVE-2016-2161
- CVE-2016-5387
- CVE-2016-8740
- CVE-2016-8743
- CVE-2017-3167
- CVE-2017-3169
- CVE-2017-7659
- CVE-2017-7668
- CVE-2017-7679
- CVE-2017-9788
- CVE-2017-9789
- CVE-2017-13786
- CVE-2017-13800
- CVE-2017-13809
- CVE-2017-13820
- CVE-2017-13807
- CVE-2017-13829
- CVE-2017-13833
- CVE-2017-13821
- CVE-2017-13825
- CVE-2017-1000100
- CVE-2017-1000101
- CVE-2017-13801
- CVE-2017-13815
- CVE-2017-13828
- CVE-2017-13811
- CVE-2017-13830
- CVE-2017-11103
- CVE-2017-13819
- CVE-2017-13814
- CVE-2017-13831
- CVE-2017-13906
- CVE-2017-13810
- CVE-2017-13817
- CVE-2017-13818
- CVE-2017-13836
- CVE-2017-13841
- CVE-2017-13840
- CVE-2017-13842
- CVE-2017-13782
- CVE-2017-13843
- CVE-2017-13834
- CVE-2017-13799
- CVE-2017-13852
- CVE-2017-13813
- CVE-2017-13812
- CVE-2016-4736
- CVE-2017-5969
- CVE-2017-5130
- CVE-2017-7376
- CVE-2017-9050
- CVE-2017-9049
- CVE-2018-4390
- CVE-2018-4391
- CVE-2017-13907
- CVE-2017-13824
- CVE-2017-13846
- CVE-2017-10140
- CVE-2017-13822
- CVE-2017-7132
- CVE-2017-13823
- CVE-2017-13808
- CVE-2017-13838
- CVE-2017-7170
- CVE-2017-7150
- CVE-2017-13908
- CVE-2017-13804
- CVE-2017-11108
- CVE-2017-11541
- CVE-2017-11542
- CVE-2017-11543
- CVE-2017-12893
- CVE-2017-12894
- CVE-2017-12895
- CVE-2017-12896
- CVE-2017-12897
- CVE-2017-12898
- CVE-2017-12899
- CVE-2017-12900
- CVE-2017-12901
- CVE-2017-12902
- CVE-2017-12985
- CVE-2017-12986
- CVE-2017-12987
- CVE-2017-12988
- CVE-2017-12989
- CVE-2017-12990
- CVE-2017-12991
- CVE-2017-12992
- CVE-2017-12993
- CVE-2017-12994
- CVE-2017-12995
- CVE-2017-12996
- CVE-2017-12997
- CVE-2017-12998
- CVE-2017-12999
- CVE-2017-13000
- CVE-2017-13001
- CVE-2017-13002
- CVE-2017-13003
- CVE-2017-13004
- CVE-2017-13005
- CVE-2017-13006
- CVE-2017-13007
- CVE-2017-13008
- CVE-2017-13009
- CVE-2017-13010
- CVE-2017-13011
- CVE-2017-13012
- CVE-2017-13013
- CVE-2017-13014
- CVE-2017-13015
- CVE-2017-13016
- CVE-2017-13017
- CVE-2017-13018
- CVE-2017-13019
- CVE-2017-13020
- CVE-2017-13021
- CVE-2017-13022
- CVE-2017-13023
- CVE-2017-13024
- CVE-2017-13025
- CVE-2017-13026
- CVE-2017-13027
- CVE-2017-13028
- CVE-2017-13029
- CVE-2017-13030
- CVE-2017-13031
- CVE-2017-13032
- CVE-2017-13033
- CVE-2017-13034
- CVE-2017-13035
- CVE-2017-13036
- CVE-2017-13037
- CVE-2017-13038
- CVE-2017-13039
- CVE-2017-13040
- CVE-2017-13041
- CVE-2017-13042
- CVE-2017-13043
- CVE-2017-13044
- CVE-2017-13045
- CVE-2017-13046
- CVE-2017-13047
- CVE-2017-13048
- CVE-2017-13049
- CVE-2017-13050
- CVE-2017-13051
- CVE-2017-13052
- CVE-2017-13053
- CVE-2017-13054
- CVE-2017-13055
- CVE-2017-13687
- CVE-2017-13688
- CVE-2017-13689
- CVE-2017-13690
- CVE-2017-13725
- CVE-2017-13077
- CVE-2017-13078
- CVE-2017-13080
- collector/nvd-index
- agent/type
- agent/remedy
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/apple-support
- agent/software-canonical-lookup-request
- agent/weakness
- agent/references
- agent/author
- agent/severity
- agent/description
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2017-1000100
- agent/software-canonical-lookup
- agent/tags
- agent/event
- collector/mitre-cve
- source/MITRE
- vendor/haxx
- canonical/haxx libcurl
- version/haxx libcurl/7.15.0
- version/haxx libcurl/7.15.1
- version/haxx libcurl/7.15.2
- version/haxx libcurl/7.15.3
- version/haxx libcurl/7.15.4
- version/haxx libcurl/7.15.5
- version/haxx libcurl/7.16.0
- version/haxx libcurl/7.16.1
- version/haxx libcurl/7.16.2
- version/haxx libcurl/7.16.3
- version/haxx libcurl/7.16.4
- version/haxx libcurl/7.17.0
- version/haxx libcurl/7.17.1
- version/haxx libcurl/7.18.0
- version/haxx libcurl/7.18.1
- version/haxx libcurl/7.18.2
- version/haxx libcurl/7.19.0
- version/haxx libcurl/7.19.1
- version/haxx libcurl/7.19.2
- version/haxx libcurl/7.19.3
- version/haxx libcurl/7.19.4
- version/haxx libcurl/7.19.5
- version/haxx libcurl/7.19.6
- version/haxx libcurl/7.19.7
- version/haxx libcurl/7.20.0
- version/haxx libcurl/7.20.1
- version/haxx libcurl/7.21.0
- version/haxx libcurl/7.21.1
- version/haxx libcurl/7.21.2
- version/haxx libcurl/7.21.3
- version/haxx libcurl/7.21.4
- version/haxx libcurl/7.21.5
- version/haxx libcurl/7.21.6
- version/haxx libcurl/7.21.7
- version/haxx libcurl/7.22.0
- version/haxx libcurl/7.23.0
- version/haxx libcurl/7.23.1
- version/haxx libcurl/7.24.0
- version/haxx libcurl/7.25.0
- version/haxx libcurl/7.26.0
- version/haxx libcurl/7.27.0
- version/haxx libcurl/7.28.0
- version/haxx libcurl/7.28.1
- version/haxx libcurl/7.29.0
- version/haxx libcurl/7.30.0
- version/haxx libcurl/7.31.0
- version/haxx libcurl/7.32.0
- version/haxx libcurl/7.33.0
- version/haxx libcurl/7.34.0
- version/haxx libcurl/7.35.0
- version/haxx libcurl/7.36.0
- version/haxx libcurl/7.37.0
- version/haxx libcurl/7.37.1
- version/haxx libcurl/7.38.0
- version/haxx libcurl/7.39
- version/haxx libcurl/7.40.0
- version/haxx libcurl/7.41.0
- version/haxx libcurl/7.42.0
- version/haxx libcurl/7.42.1
- version/haxx libcurl/7.43.0
- version/haxx libcurl/7.44.0
- version/haxx libcurl/7.45.0
- version/haxx libcurl/7.46.0
- version/haxx libcurl/7.47.0
- version/haxx libcurl/7.47.1
- version/haxx libcurl/7.48.0
- version/haxx libcurl/7.49.0
- version/haxx libcurl/7.49.1
- version/haxx libcurl/7.50.0
- version/haxx libcurl/7.50.1
- version/haxx libcurl/7.50.2
- version/haxx libcurl/7.50.3
- version/haxx libcurl/7.51.0
- version/haxx libcurl/7.52.0
- version/haxx libcurl/7.52.1
- version/haxx libcurl/7.53.0
- version/haxx libcurl/7.53.1
- version/haxx libcurl/7.54.0
- version/haxx libcurl/7.54.1
- vendor/apple
- canonical/apple macos high sierra
- canonical/apple sierra
- canonical/apple el capitan
- package-manager/redhat