« List of all CVEs

CVE-2017-8817

Published: 11/29/2017 Last updated: 8/5/2024 Reserved: 5/7/2017

The FTP wildcard function in curl and libcurl before 7.57.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) or possibly have unspecified other impact via a string that ends with an '[' character.

CNA assigner: debian (79363d38-fa19-49d1-9214-5f28da3f3ac5) Requested by: n/a

Opam packages affected (3)

conf-libcurl conf-mingw-w64-curl-i686 conf-mingw-w64-curl-x86_64

Products affected (1)

Product Vendor Version
curl and libcurl before 7.57.0 n/a < V8.2

References (16)