USN-3882-1

Dashboard / Vulnerabilities / USN-3882-1

USN-3882-1

Summary: curl vulnerabilities

Details: Wenxiang Qian discovered that curl incorrectly handled certain NTLM authentication messages. A remote attacker could possibly use this issue to cause curl to crash, resulting in a denial of service. This issue only applied to Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 18.10. (CVE-2018-16890) Wenxiang Qian discovered that curl incorrectly handled certain NTLMv2 authentication messages. A remote attacker could use this issue to cause curl to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only applied to Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 18.10. (CVE-2019-3822) Brian Carpenter discovered that curl incorrectly handled certain SMTP responses. A remote attacker could possibly use this issue to cause curl to crash, resulting in a denial of service. (CVE-2019-3823)

References: https://ubuntu.com/security/notices/USN-3882-1, https://ubuntu.com/security/CVE-2018-16890, https://ubuntu.com/security/CVE-2019-3822, https://ubuntu.com/security/CVE-2019-3823