VDB
ALINUX2-SA-2019%3A0058
ALINUX2-SA-2019%3A0058
PUBLISHED
CVSS 3.5999999046325684 LOW
Package updates are available for Alibaba Cloud Linux 2.1903 that fix the following vulnerabilities: CVE-2018-16842: Curl versions 7.14.1 through 7.61.1 are vulnerable to a heap-based buffer over-read in the tool_msgs.c:voutf() function that may result in information exposure and denial of service.
Risk Scores
CVSS 3.0
3.5999999046325684
CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Alibaba Cloud | curl |
Timeline
- Oct 8, 2019 CVE Published
- Oct 8, 2019 CVE Updated