CURL/libcURL Denial of Service Vulnerability (CVE-2018-1000121)

CURL/libcURL Denial of Service Vulnerability (CVE-2018-1000121)
CURL/libcURL Denial of Service Vulnerability (CVE-2018-1000121)

Release date:
Updated on:

Affected Systems:

Haxx curl 7.21.0-7.58.0
Haxx libcURL 7.21.0-7.58.0

Description:

Bugtraq id: 103415
CVE (CAN) ID: CVE-2018-1000121

LibcURL is a multi-protocol file transfer library.

CURL/libcURL 7.21.0-7.58.0 has a denial of service vulnerability. Attackers can exploit this vulnerability to cause denial of service.

<* Source: Dario Weisser
*>

Suggestion:

Vendor patch:

Haxx
----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://curl.haxx.se/
Https://bugzilla.redhat.com/show_bug.cgi? Id = 1552631
Https://access.redhat.com/security/cve/cve-2018-1000121
Https://curl.haxx.se/docs/adv_2018-97a2.html

This article permanently updates link: https://www.bkjia.com/Linux/2018-03/151475.htm