FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-04-19 20:48:44 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML ID	Description
9314058e-5204-11e7-b712-b1a44a034d72	cURL -- URL file scheme drive letter buffer overflow cURL security advisory: When libcurl is given either 1. a file: URL that doesn't use two slashes following the colon, or 2. is told that file is the default scheme to use for URLs without scheme ... and the given path starts with a drive letter and libcurl is built for Windows or DOS, then libcurl would copy the path with a wrong offset, so that the end of the given path would write beyond the malloc buffer. Up to seven bytes too much. We are not aware of any exploit of this flaw. Discovery 2017-06-14 Entry 2017-06-15 curl ge 7.53.0 lt 7.54.1 CVE-2017-9502 https://curl.haxx.se/docs/adv_20170614.html

VuXML ID

Description

9314058e-5204-11e7-b712-b1a44a034d72

cURL -- URL file scheme drive letter buffer overflow

cURL security advisory:

When libcurl is given either

1. a file: URL that doesn't use two slashes following the colon, or

2. is told that file is the default scheme to use for URLs without scheme

... and the given path starts with a drive letter and libcurl is built for Windows or DOS, then libcurl would copy the path with a wrong offset, so that the end of the given path would write beyond the malloc buffer. Up to seven bytes too much.

We are not aware of any exploit of this flaw.

Discovery 2017-06-14
Entry 2017-06-15
curl

ge 7.53.0 lt 7.54.1

CVE-2017-9502
https://curl.haxx.se/docs/adv_20170614.html