Integer Overflow or Wraparound

Affecting curl package, versions <7.38.0-4+deb8u8

Overview

The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denial of service (integer overflow and resultant buffer overflow, and application crash) or possibly have unspecified other impact via vectors involving long user and password fields.

References

• CONFIRM
• CONFIRM
• CVE Details
• Debian Security Advisory
• Debian Security Tracker
• Gentoo Security Advisory
• RHSA Security Advisory
• Security Focus
• Security Tracker
• Security Tracker
• Ubuntu CVE Tracker