Alerts This Week
Warning Icon 1 566
Alerts This Week
Warning Icon 1 566

Debian: DSA-2713-1 Critical: Curl Heap Overflow Vulnerability

debian
Calendar Grey June 24, 2013
Debian Logo
A recent patch for curl has been released to fix a critical buffer overflow security flaw, aimed at enhancing system reliability and safeguarding URL processing.
Timo Sirainen discovered that cURL, an URL transfer library, is prone to a heap overflow vulnerability due to bad checking of the input data in the curl_easy_unescape function
Topics%20covered

Topics Covered

security advisory critical debian heap overflow local threat curl

Summary

The curl command line tool is not affected by this problem as it doesn't
use the curl_easy_unescape function.

For the oldstable distribution (squeeze), this problem has been fixed in
version 7.21.0-2.1+squeeze4.

For the stable distribution (wheezy), this problem has been fixed in
version 7.26.0-1+wheezy3.

For the unstable distribution (sid), this problem has been fixed in
version 7.31.0-1.

We recommend that you upgrade your curl packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: http://www.debian.org/security/



Severity
critical
Lowest
Low
Medium
High
Critical

Package: curl
CVE ID: CVE-2013-2174

Topics%20covered

Topics Covered

security advisory critical debian heap overflow local threat curl

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here