FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

cURL -- potential memory disclosure

Affected packages
6.5 <= curl < 7.53.1_1

Details

VuXML ID 04f29189-1a05-11e7-bc6e-b499baebfeaf
Discovery 2017-04-03
Entry 2017-04-05
Modified 2017-04-06

The cURL project reports:

There were two bugs in curl's parser for the command line option --write-out (or -w for short) that would skip the end of string zero byte if the string ended in a % (percent) or \ (backslash), and it would read beyond that buffer in the heap memory and it could then potentially output pieces of that memory to the terminal or the target file etc..

This flaw only exists in the command line tool.

We are not aware of any exploit of this flaw.

References

CVE Name CVE-2017-7407
URL https://curl.haxx.se/docs/adv_20170403.html