在 URL 傳輸程式庫 cURL 中發現兩個弱點。- CVE-2017-8816 Alex Nichols 在 NTLM 驗證程式碼中發現一個可能會在 32 位元系統上觸發的緩衝區溢位缺陷，會造成在計算記憶體配置大小時引發整數溢位。- CVE-2017-8817 OSS-Fuzz 專案執行模糊測試，導致在 libcurl 的 FTP wildcard 函式中發現超出邊界讀取缺陷。惡意伺服器可將 libcurl 型用戶端重新導向至使用 wildcard 模式的 URL，藉此觸發超出邊界讀取。

Alex Nichols 發現 curl 未正確處理 NTLM 驗證憑證。遠端攻擊者可利用此問題造成 curl 損毀，進而導致拒絕服務或可能執行任意程式碼。此問題僅影響了 Ubuntu 16.04 LTS、Ubuntu 17.04 和 Ubuntu 17.10。(CVE-2017-8816)

據發現，curl 未正確處理 FTP 萬用字元相符。
遠端攻擊者可利用此問題造成 curl 損毀，進而導致拒絕服務或可能取得敏感資訊。(CVE-2017-8817)

請注意，Tenable Network Security 已直接從 Ubuntu 安全性公告擷取前述描述區塊。Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。

- fix NTLM buffer overflow via integer overflow     (CVE-2017-8816)

  - fix FTP wildcard out of bounds read (CVE-2017-8817)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for curl fixes the following issues :

Security issues fixed :

  - CVE-2017-8816: Buffer overrun flaw in the NTLM     authentication code (bsc#1069226).

  - CVE-2017-8817: Read out of bounds flaw in the FTP     wildcard function (bsc#1069222).

This update was imported from the SUSE:SLE-12:Update update project.

An update of 'postgresql', 'curl' packages of Photon OS has been released.

An update of the curl package has been released.

According to the version of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - The FTP wildcard function in curl and libcurl before     7.57.0 allows remote attackers to cause a denial of     service (out-of-bounds read and application crash) or     possibly have unspecified other impact via a string     that ends with an '[' character.(CVE-2017-8817)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is running a version of Mac OS X that is 10.13.x prior to 10.13.3. It is, therefore, affected by multiple vulnerabilities in the following components :

 - Audio
 - curl
 - IOHIDFamily
 - Kernel
 - LinkPresentation
 - QuartzCore
 - Sandbox
 - Security
 - WebKit
 - Wi-Fi

Note that successful exploitation of the most serious issues can result in arbitrary code execution.

ID	名稱	產品	系列	已發布	已更新	嚴重性
104861	Debian DSA-4051-1：curl - 安全性更新	Nessus	Debian Local Security Checks	2017/11/30	2021/1/4	critical
104881	Ubuntu 14.04 LTS / 16.04 LTS：curl 弱點 (USN-3498-1)	Nessus	Ubuntu Local Security Checks	2017/11/30	2025/9/3	critical
105863	Fedora 27 : curl (2017-45bdf4dace)	Nessus	Fedora Local Security Checks	2018/1/15	2021/1/11	critical
106219	openSUSE Security Update : curl (openSUSE-2018-56)	Nessus	SuSE Local Security Checks	2018/1/22	2021/1/19	critical
111919	Photon OS 1.0: Curl / Postgresql PHSA-2018-1.0-0108 (deprecated)	Nessus	PhotonOS Local Security Checks	2018/8/17	2019/2/7	critical
121808	Photon OS 1.0: Curl PHSA-2018-1.0-0108	Nessus	PhotonOS Local Security Checks	2019/2/7	2024/6/21	critical
121916	Photon OS 2.0: Curl PHSA-2018-2.0-0016	Nessus	PhotonOS Local Security Checks	2019/2/7	2024/7/22	critical
106767	EulerOS 2.0 SP1 : curl (EulerOS-SA-2018-1039)	Nessus	Huawei Local Security Checks	2018/2/13	2021/1/6	critical
106768	EulerOS 2.0 SP2 : curl (EulerOS-SA-2018-1040)	Nessus	Huawei Local Security Checks	2018/2/13	2021/1/6	critical
700514	macOS 10.13.x < 10.13.3 Multiple Vulnerabilities	Nessus Network Monitor	Operating System Detection	2019/4/10	2019/4/10	critical

偵測

搜尋 Plugin

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical