ISOMAN

CVE

CVE-2018-16840

A heap use-after-free flaw was found in curl versions from 7.59.0 through 7.61.1 in the code related to closing an easy handle. When closing and cleaning up an 'easy' handle in the `Curl_close()` function, the library code first frees a struct (without nulling the pointer) and might then subsequently erroneously write to a struct field within that already freed struct.

Severity
CRITICAL
CVSS
9.8
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://www.securitytracker.com/id/1042013
  2. https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16840
  3. https://curl.haxx.se/docs/CVE-2018-16840.html
  4. https://github.com/curl/curl/commit/81d135d67155c5295b1033679c606165d4e28f3f
  5. https://security.gentoo.org/glsa/201903-03
  6. https://usn.ubuntu.com/3805-1/
  7. http://www.securitytracker.com/id/1042013
  8. https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16840
  9. https://curl.haxx.se/docs/CVE-2018-16840.html
  10. https://github.com/curl/curl/commit/81d135d67155c5295b1033679c606165d4e28f3f
  11. https://security.gentoo.org/glsa/201903-03
  12. https://usn.ubuntu.com/3805-1/