CVE-2017-8818 Memory corruption in curl and libcurl before 7.57.0
Attackers can cause a denial of service via out-of-bounds access in curl on 32-bit platforms due to insufficient memory allocation for SSL interfacing.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2017-8818?
CVE-2017-8818 is a critical memory corruption vulnerability in Haxx Curl, published on 29 Nov 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
curl and libcurl before 7.57.0 on 32-bit platforms allow attackers to cause a denial of service (out-of-bounds access and application crash) or possibly have unspecified other impact because too little memory is allocated for interfacing to an SSL library.
Weakness: CWE-119
Which versions are affected by CVE-2017-8818?
It affects 2 products.
Products include Haxx Curl, Haxx Libcurl.
How do I fix CVE-2017-8818?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2017-8818 being exploited?
There is no known exploitation of CVE-2017-8818 in the wild and no public exploit code.
Other vulnerabilities in Haxx Curl
Sources
Also known as ALPINE-CVE-2017-8818, CLEANSTART-2026-NF09158, CURL-CVE-2017-8818, DEBIAN-CVE-2017-8818, GHSA-rm6j-8x6m-cxhp.