CVE-2024-6874: macidn punycode buffer overread
cURL libcurl could allow a remote attacker to obtain sensitive information, caused by a macidn punycode buffer overread flaw in the URL API function curlurlget(). By sending a specially crafted request, an attacker could exploit this vulnerability to obtain sensitive information, and use this information to launch further attacks against the affected system.
Other sources
libcurl's URL API function curlurlget() offers punycode conversions, to and from IDN. Asking to convert a name that is exactly 256 bytes, libcurl ends up reading outside of a stack based buffer when built to use the macidn IDN backend. The conversion function then fills up the provided buffer exactly - but does not null terminate the string.
This flaw can lead to stack contents accidently getting returned as part of the converted string.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-6874?
CVE-2024-6874 has been classified as a medium severity vulnerability due to its potential to expose sensitive information.
How do I fix CVE-2024-6874?
To fix CVE-2024-6874, update libcurl to version 8.8.1 or later, or upgrade IBM Storage Protect Backup-Archive Client to version 8.1.24 or higher.
What type of vulnerability is CVE-2024-6874?
CVE-2024-6874 is a buffer overread vulnerability affecting the URL API function in libcurl.
Who is affected by CVE-2024-6874?
CVE-2024-6874 affects libcurl version 8.8.0 and IBM Storage Protect Backup-Archive Client versions 8.1.0.0 to 8.1.23.0.
What can an attacker achieve by exploiting CVE-2024-6874?
An attacker exploiting CVE-2024-6874 can obtain sensitive information by crafting a specific request.