CVE-2018-1000122: Critical severity Debian Debian Linux vulnerability
A buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling code that allows an attacker to cause a denial of service or information leakage
Other sources
curl can be tricked into copying data beyond end of its heap based buffer.
When asked to transfer an RTSP URL, curl could calculate a wrong data length to copy from the read buffer. The memcpy call would copy data from the heap following the buffer to a storage area that would subsequently be delivered to the application (if it didn't cause a crash). We've managed to get it to reach several hundreds bytes out of range.
This could lead to information leakage or a denial of service for the application if the server offering the RTSP data can trigger this.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/curlto a version that resolves this vulnerability.Fixed in 7.59.0 - Upgrade
Upgrade
debian/curlto a version that resolves this vulnerability.Fixed in 7.74.0-1.3+deb11u13Fixed in 7.74.0-1.3+deb11u16Fixed in 7.88.1-10+deb12u14Fixed in 7.88.1-10+deb12u5Fixed in 8.14.1-2+deb13u3Fixed in 8.20.0-5Fixed in 8.21.0~rc2-1 - Upgrade
Upgrade
debian/curlto a version that resolves this vulnerability.Fixed in 7.74.0-1.3+deb11u13 - Upgrade
Upgrade
debian/curlto a version that resolves this vulnerability.Fixed in 7.74.0-1.3+deb11u16 - Upgrade
Upgrade
debian/curlto a version that resolves this vulnerability.Fixed in 7.88.1-10+deb12u14 - Upgrade
Upgrade
debian/curlto a version that resolves this vulnerability.Fixed in 7.88.1-10+deb12u5 - Upgrade
Upgrade
debian/curlto a version that resolves this vulnerability.Fixed in 8.14.1-2+deb13u3 - Upgrade
Upgrade
debian/curlto a version that resolves this vulnerability.Fixed in 8.20.0-5 - Upgrade
Upgrade
debian/curlto a version that resolves this vulnerability.Fixed in 8.21.0~rc2-1
Event History
Frequently Asked Questions
What is CVE-2018-1000122?
CVE-2018-1000122 is a vulnerability in the RTSP+RTP handling code of curl versions 7.20.0 to 7.58.0 that can be exploited to cause a denial of service or information leakage.
How severe is CVE-2018-1000122?
CVE-2018-1000122 has a severity rating of 9.1, which is considered critical.
Which software versions are affected by CVE-2018-1000122?
CVE-2018-1000122 affects curl versions 7.20.0 to 7.58.0.
How can I fix CVE-2018-1000122?
To fix CVE-2018-1000122, update curl to version 7.59.0 or higher.
Where can I find more information about CVE-2018-1000122?
You can find more information about CVE-2018-1000122 at the following references: [link1](https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=1405982&action=diff), [link2](https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=1405982&action=edit), [link3](https://curl.haxx.se/docs/adv_2018-b047.html).