curl Multiple Vulnerabilities

Last Update Date: 1 Dec 2017 Release Date: 30 Nov 2017 3977 Views

RISK: Medium Risk

TYPE: Operating Systems - Linux

Multiple vulnerabilities have been identified in curl which could lead to the execution of arbitrary code, denial of service and access confidential data.

Impact

Denial of Service
Remote Code Execution
Information Disclosure

System / Technologies affected

Ubuntu 17.04
Ubuntu 17.10
Ubuntu 16.04 LTS
Ubuntu 14.04 LTS

and their derivatives

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

The vendor has issued a fix:
https://usn.ubuntu.com/usn/usn-3498-1/
https://curl.haxx.se/docs/adv_2017-ae72.html

Vulnerability Identifier

CVE-2017-8816
CVE-2017-8817

Source

AusCERT