Bug 48761 – curl: Multiple issues (4.2)

Bug 48761 - curl: Multiple issues (4.2)


Summary:	curl: Multiple issues (4.2)

Status:	CLOSED FIXED

Product:	UCS
Classification:	Unclassified
Component:	Security updates
Version:	UCS 4.2
Hardware:	All Linux

Importance:	P3 normal (vote)
Target Milestone:	UCS 4.2-5-errata
Assigned To:	Quality Assurance
QA Contact:	Philipp Hahn

URL:
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2019-02-26 11:34 CET by Quality Assurance
Modified:	2019-02-27 14:06 CET (History)
CC List:	0 users

See Also:
What kind of report is it?:	Security Issue
What type of bug is this?:	---
Who will be affected by this bug?:	---
How will those affected feel about the bug?:	---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:	5.3 (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H)

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Quality Assurance

2019-02-26 11:34:07 CET

New Debian curl 7.38.0-4+deb8u14 fixes:
This update addresses the following issues:
* NTLM type-2 heap out-of-bounds buffer read (CVE-2018-16890)
* NTLMv2 type-3 header stack buffer overflow (CVE-2019-3822)
* SMTP end-of-response out-of-bounds read (CVE-2019-3823)

Comment 1 Quality Assurance

2019-02-26 12:02:12 CET

--- mirror/ftp/4.2/unmaintained/component/4.2-5-errata/source/curl_7.38.0-4+deb8u13.dsc
+++ apt/ucs_4.2-0-errata4.2-5/source/curl_7.38.0-4+deb8u14.dsc
@@ -1,3 +1,12 @@
+7.38.0-4+deb8u14 [Mon, 11 Feb 2019 15:57:22 +0100] Chris Lamb <lamby@debian.org>:
+
+  * CVE-2018-16890: Fix a heap buffer out-of-bounds read vulnerability in the
+    handling of NTLM type-2 messages.
+  * CVE-2019-3822: Fix a stack-based buffer overflow in the handling of
+    outgoing NTLM type-3 headers.
+  * CVE-2019-3823: Fix a heap out-of-bounds read in the code handling the
+    end-of-response in the SMTP protocol.
+
 7.38.0-4+deb8u13 [Tue, 06 Nov 2018 19:01:46 +0100] Markus Koschany <apo@debian.org>:
 
   * Non-maintainer upload by the LTS team.

<http://10.200.17.11/4.2-5/#580695000930727894>

Comment 2 Philipp Hahn

2019-02-26 18:16:26 CET

OK: yaml
OK: announce_errata
OK: patch
OK: piuparts

[4.2-5] 8dfe04bf15 Bug #48761: curl 7.38.0-4+deb8u14
 doc/errata/staging/curl.yaml | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

Comment 3 Arvid Requate

2019-02-27 14:06:40 CET

<http://errata.software-univention.de/ucs/4.2/598.html>