Skip to main content

Out-of-bounds Read

CVE-2024-6874

Medium
4.3/10

Summary

The package libcurl's URL API function "curl_url_get()" offers "punycode" conversions, to and from IDN. Asking to convert a name that is exactly "256" bytes, libcurl reads outside of a stack-based buffer when built to use the "macidn" IDN backend. The conversion function fills up the provided buffer exactly, but does not null terminate the string. This issue affects curl package version 8.8.0. This flaw can lead to stack contents accidentally getting returned as part of the converted string.

  • LOW
  • NETWORK
  • NONE
  • UNCHANGED
  • NONE
  • LOW
  • LOW
  • NONE

CWE-125 - Out-of-Bounds Read

Out-of-bounds read is a vulnerability that allows access to memory beyond the authorized accessible location. Such a vulnerability compromises the confidentiality of the trusted environment in the application and enables an attacker to launch further attacks by leveraging the exposed information.

References

Advisory Timeline

  • Published