CVE-2018-16839: Buffer Overflow
Curl versions 7.33.0 through 7.61.1 are vulnerable to a buffer overrun in the SASL authentication code that may lead to denial of service.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2018-16839?
CVE-2018-16839 is a vulnerability in Curl versions 7.33.0 through 7.61.1 that can lead to denial of service due to a buffer overrun in the SASL authentication code.
What is the severity of CVE-2018-16839?
The severity of CVE-2018-16839 is critical with a CVSS score of 9.8.
How does CVE-2018-16839 affect software?
CVE-2018-16839 affects Curl versions 7.33.0 through 7.61.1 on Debian, Ubuntu, and Haxx Curl, leading to denial of service.
How can I fix CVE-2018-16839?
To fix CVE-2018-16839, update to the recommended versions: 7.64.0-4+deb10u2, 7.64.0-4+deb10u7, 7.74.0-1.3+deb11u9, 7.74.0-1.3+deb11u10, 7.88.1-10+deb12u3, 7.88.1-10+deb12u4, or 8.4.0-2.
Where can I find more information about CVE-2018-16839?
You can find more information about CVE-2018-16839 on the following references: [link1](https://curl.haxx.se/docs/CVE-2018-16839.html), [link2](https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16839), [link3](https://github.com/curl/curl/commit/f3a24d7916b9173c69a3e0ee790102993833d6c5).