CVE-2016-8622
Low
Description
The URL percent-encoding decode function in libcurl before 7.51.0 is called `curl_easy_unescape`. Internally, even if this function would be made to allocate a unscape destination buffer larger than 2GB, it would return that new length in a signed 32 bit integer variable, thus the length would get either just truncated or both truncated and turned negative. That could then lead to libcurl writing outside of its heap based buffer.
SeverityLow
CVSS3.7
Exploit probability—
ProductHaxx Libcurl
PublishedJul 31, 2018
First seenJul 31, 2018
Weakness typeCWE-190Integer overflowCWE-122CWE-122
How to fix
Update
- haxx libcurl7.51.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| haxx libcurl | v < 7.51.0 | 7.51.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.