CVE-2017-8816: Integer Overflow

Reference Links

• https://support.apple.com/en-us/HT208692 (Advisory)
• http://security.cucumberlinux.com/security/details.php?id=161
• http://www.securityfocus.com/bid/101998
• http://www.securitytracker.com/id/1039896
• http://www.securitytracker.com/id/1040608
• https://access.redhat.com/errata/RHSA-2018:3558
• https://curl.haxx.se/docs/adv_2017-12e7.html
• https://security.gentoo.org/glsa/201712-04
• https://www.debian.org/security/2017/dsa-4051
• https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=1356597&action=diff
• https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=1356597&action=edit
• https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=1356599&action=diff
• https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=1356599&action=edit
• https://github.com/curl/curl/commit/86724581b6c02d160b52f817550cfdfc9c93af62
• https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1518621
• https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1518622
• https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1518620
• https://github.com/curl/curl/commit/7f2a1df6f5fc598750b2c6f34465c8d924db28cc
• https://bugzilla.redhat.com/show_bug.cgi?id=1515757
• https://www.cve.org/CVERecord?id=CVE-2017-8816 https://nvd.nist.gov/vuln/detail/CVE-2017-8816 https://curl.haxx.se/docs/adv_2017-12e7.html
• https://access.redhat.com/security/cve/CVE-2017-8816
• https://curl.haxx.se/docs/adv_2017-11e7.html
• https://curl.haxx.se/CVE-2017-8816.patch
• https://security-tracker.debian.org/tracker/CVE-2017-8816

Parent vulnerabilities

(Appears in the following advisories)

• RHSA-2018:3558
• HT208692

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2018-4170
• CVE-2018-4105
• CVE-2018-4112
• CVE-2018-4166
• CVE-2018-4155
• CVE-2018-4158
• CVE-2018-4142
• CVE-2017-13890
• CVE-2017-8816
• CVE-2018-4176
• CVE-2018-4108
• CVE-2017-13080
• CVE-2018-4167
• CVE-2018-4151
• CVE-2018-4132
• CVE-2018-4135
• CVE-2018-4150
• CVE-2018-4104
• CVE-2018-4143
• CVE-2018-4136
• CVE-2018-4160
• CVE-2018-4185
• CVE-2018-4139
• CVE-2018-4175
• CVE-2017-15412
• CVE-2018-4187
• CVE-2018-4179
• CVE-2018-4111
• CVE-2018-4174
• CVE-2018-4152
• CVE-2017-7151
• CVE-2018-4138
• CVE-2018-4107
• CVE-2018-4156
• CVE-2018-4157
• CVE-2018-4298
• CVE-2018-4144
• CVE-2017-13911
• CVE-2018-4173
• CVE-2018-4154
• CVE-2018-4115
• CVE-2018-4106
• CVE-2018-4131

Frequently Asked Questions

• What is CVE-2017-8816?

  CVE-2017-8816 is a vulnerability in curl that allows attackers to cause a denial of service or have unspecified impact by exploiting an integer overflow and resultant buffer overflow.

• How severe is CVE-2017-8816?

  CVE-2017-8816 is considered critical with a severity rating of 9.8.

• Which software versions are affected by CVE-2017-8816?

  curl and libcurl versions before 7.57.0 on 32-bit platforms are affected by CVE-2017-8816.

• How can I fix CVE-2017-8816?

  To fix CVE-2017-8816, update curl and libcurl to version 7.57.0 or later.

• Where can I find more information about CVE-2017-8816?

  More information about CVE-2017-8816 can be found in the references: [link 1](https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=1356597&action=diff), [link 2](https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=1356597&action=edit), [link 3](https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=1356599&action=diff).