CURL-CVE-2006-1061
Dashboard / Vulnerabilities / CURL-CVE-2006-1061
Summary: TFTP Packet Buffer Overflow
Details: libcurl uses the given file part of a TFTP URL in a manner that allows a malicious user to overflow a heap-based memory buffer due to the lack of boundary check. This overflow happens if you pass in a URL with a TFTP protocol prefix ("tftp://"), using a valid host and a path part that is longer than 512 bytes. The affected flaw can be triggered by a redirect, if curl/libcurl is told to follow redirects and an HTTP server points the client to a tftp URL with the characteristics described above.
References:
Affected packages
Package
Name:
Purl:
Affected ranges
Type: SEMVER
Events:
Introduced- 7.15.0
Fixed -7.15.3
Affected versions
7.15.2
7.15.1
7.15.0
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
