{"id":"CVE-2018-16842","details":"Curl versions 7.14.1 through 7.61.1 are vulnerable to a heap-based buffer over-read in the tool_msgs.c:voutf() function that may result in information exposure and denial of service.","aliases":["CURL-CVE-2018-16842"],"modified":"2026-05-17T11:54:00.655773424Z","published":"2018-10-31T19:29:00.690Z","related":["SUSE-SU-2018:3607-1","SUSE-SU-2018:3608-1","SUSE-SU-2018:3624-1","SUSE-SU-2018:3681-1","SUSE-SU-2019:0339-1","openSUSE-SU-2024:10582-1"],"database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*"],"extracted_events":[{"last_affected":"12.04"},{"last_affected":"14.04"},{"last_affected":"16.04"},{"last_affected":"18.04"},{"last_affected":"18.10"}],"source":"CPE_FIELD","vendor_product":"canonical:ubuntu_linux"},{"extracted_events":[{"last_affected":"8.0"},{"last_affected":"9.0"}],"source":"CPE_FIELD","vendor_product":"debian:debian_linux","cpes":["cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"]}]},"references":[{"type":"ADVISORY","url":"http://www.securitytracker.com/id/1042014"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:2181"},{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2018/11/msg00005.html"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/201903-03"},{"type":"ADVISORY","url":"https://usn.ubuntu.com/3805-1/"},{"type":"ADVISORY","url":"https://usn.ubuntu.com/3805-2/"},{"type":"ADVISORY","url":"https://www.debian.org/security/2018/dsa-4331"},{"type":"ADVISORY","url":"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16842"},{"type":"FIX","url":"https://curl.haxx.se/docs/CVE-2018-16842.html"},{"type":"FIX","url":"https://github.com/curl/curl/commit/d530e92f59ae9bb2d47066c3c460b25d2ffeb211"}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H"}]}