USN-3457-1: curl vulnerability
USN-3457-1: curl vulnerability Ubuntu Security Notice USN-3457-1 23rd October, 2017 curl vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 17.10 Ubuntu 17.04 Ubuntu 16.04 LTS Ubuntu 14.04 LTS Summary curl could be made to crash or run programs if it received specially crafted network traffic. Software description curl – HTTP, HTTPS, and FTP client and client libraries Details Brian Carpenter discovered that curl incorrectly handled IMAP FETCHresponse lines. A remote attacker could use this issue to cause curl tocrash, resulting in a denial of service, or possibly execute arbitrarycode. Update instructions The problem can be corrected by updating your system to the following package version: Ubuntu 17.10: libcurl3-nss 7.55.1-1ubuntu2.1 curl 7.55.1-1ubuntu2.1 libcurl3-gnutls 7.55.1-1ubuntu2.1 libcurl3 7.55.1-1ubuntu2.1 Ubuntu 17.04: libcurl3-nss 7.52.1-4ubuntu1.3 curl 7.52.1-4ubuntu1.3 libcurl3-gnutls 7.52.1-4ubuntu1.3 libcurl3 7.52.1-4ubuntu1.3 Ubuntu 16.04 LTS: libcurl3-nss 7.47.0-1ubuntu2.4 curl 7.47.0-1ubuntu2.4 libcurl3-gnutls 7.47.0-1ubuntu2.4 libcurl3 [ more… ]