CVE-2016-7167

CRITICAL

Fedora < 7.50.2 - Integer Overflow

Title source: rule
STIX 2.1

Description

Multiple integer overflows in the (1) curl_escape, (2) curl_easy_escape, (3) curl_unescape, and (4) curl_easy_unescape functions in libcurl before 7.50.3 allow attackers to have unspecified impact via a string of length 0xffffffff, which triggers a heap-based buffer overflow.

References (13)

Core 13
Core References
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2018:3558
Broken Link vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/92975
Mailing List mailing-list x_refsource_mlist
https://lists.debian.org/debian-lts-announce/2018/11/msg00005.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1036813
Vendor Advisory x_refsource_confirm
https://curl.haxx.se/docs/adv_20160914.html
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2017:2016
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2018:2486
Third Party Advisory vendor-advisory x_refsource_gentoo
https://security.gentoo.org/glsa/201701-47

Scores

CVSS v3 9.8
EPSS 0.0226
EPSS Percentile 84.8%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-190
Status published
Products (4)
fedoraproject/fedora 23
fedoraproject/fedora 24
fedoraproject/fedora 25
haxx/libcurl < 7.50.2
Published Oct 07, 2016
Tracked Since Feb 18, 2026