CVE-2018-16890

    Dashboard / Vulnerabilities / CVE-2018-16890

    CVE-2018-16890

    Published: 6 Feb 2019Last Modified: 8 Jul 2026

    Summary:

    Details: libcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read. The function handling incoming NTLM type-2 messages (`lib/vauth/ntlm.c:ntlm_decode_type2_target`) does not validate incoming data correctly and is subject to an integer overflow vulnerability. Using that overflow, a malicious or broken NTLM server could trick libcurl to accept a bad length + offset combination that would lead to a buffer read out-of-bounds.

    References: https://lists.apache.org/thread.html/8338a0f605bdbb3a6098bb76f666a95fc2b2f53f37fa1ecc89f1146f%40%3Cdevnull.infra.apache.org%3E, https://support.f5.com/csp/article/K03314397?utm_source=f5support&amp%3Butm_medium=RSS, http://www.securityfocus.com/bid/106947, https://access.redhat.com/errata/RHSA-2019:3701, https://cert-portal.siemens.com/productcert/pdf/ssa-436177.pdf, https://usn.ubuntu.com/3882-1/, https://www.debian.org/security/2019/dsa-4386, https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16890, https://curl.haxx.se/docs/CVE-2018-16890.html, https://security.netapp.com/advisory/ntap-20190315-0001/, https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html, https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 4f041c9d6e61829310eb0715d8edb2a232478123
    Fixed -f3294d9d86e6a7915a967efff2842089b8b0d071

    Affected versions

    curl-7_63_0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High