CVE-2019-3822: The curl Project curl vulnerability
The curl Project · curl
Fixed in 7.64.0 · Affected: The curl Project curl before 7.64.0 · Exploitation: likely to be exploited (10% or more)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 96% of scored CVEs
DescriptionCVE.org
libcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow. The function creating an outgoing NTLM type-3 header (`lib/vauth/ntlm.c:Curl_auth_create_ntlm_type3_message()`), generates the request HTTP header contents based on previously received data. The check that exists to prevent the local buffer from getting overflowed is implemented wrongly (using unsigned math) and as such it does not prevent the overflow from happening. This output data can grow larger than the local buffer if very large 'nt response' data is extracted from a previous NTLMv2 header provided by the malicious or broken HTTP server. Such a 'large value' needs to be around 1000 bytes or more. The actual payload data copied to the target buffer comes from the NTLMv2 type-2 response header.
Affected products1
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- The curl Project · curl7.64.0
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Likely to be exploited (10% or more). EPSS gives it a 10% or higher chance of exploitation in the next 30 days.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Vendor
- The curl Project
- Published
- February 2019
CoverageNo articles yet
No CyberSIXT article names CVE-2019-3822 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.
References
- NVD entrynvd.nist.gov
- CVE recordcve.org
- Weakness CWE-121cwe.mitre.org
- Vendor advisorysecurity.gentoo.org
- Vendor advisorydebian.org
- Vendor advisoryusn.ubuntu.com
- Vendor advisoryaccess.redhat.com
- bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3822bugzilla.redhat.com
- curl.haxx.se/docs/CVE-2019-3822.htmlcurl.haxx.se
- security.netapp.com/advisory/ntap-20190315-0001security.netapp.com
- securityfocus.com/bid/106950securityfocus.com
- cert-portal.siemens.com/productcert/pdf/ssa-436177.pdfcert-portal.siemens.com
- oracle.com/technetwork/security-advisory/cpuapr2019-5072813.htmloracle.com
- oracle.com/technetwork/security-advisory/cpujul2019-5072835.htmloracle.com
- security.netapp.com/advisory/ntap-20190719-0004security.netapp.com
3 more references are in the CVE record.