Errata overview
Errata ID 328
Date 2018-04-18
Source package curl
Fixed in version 7.38.0-4+deb8u10
Description
This update addresses the following issues:
* Fix NTLM buffer overflow via integer overflow (CVE-2017-8816)
* Fix FTP wildcard out of bounds read (CVE-2017-8817)
* Fix TFTP sends more than buffer size (CVE-2017-1000100)
* Fix URL globbing out of bounds read (CVE-2017-1000101)
* HTTP authentication leak in redirects (CVE-2018-1000007)
* Fix NIL byte out of bounds write due to FTP path trickery as per
  CVE-2018-1000120
* Fix LDAP NULL pointer dereference as per CVE-2018-1000121
* Fix RTSP RTP buffer over-read as per CVE-2018-1000122
* Fix FTP PWD response parser out of bounds read (CVE-2017-1000254)
* Fix IMAP FETCH response out of bounds read (CVE-2017-1000257)
Additional notes
CVE ID CVE-2017-8816
CVE-2017-8817
CVE-2017-1000100
CVE-2017-1000101
CVE-2018-1000007
CVE-2018-1000120
CVE-2018-1000121
CVE-2018-1000122
CVE-2017-1000254
CVE-2017-1000257
UCS Bug number #45604