{"id":"CVE-2018-1000301","aliases":["ALPINE-CVE-2018-1000301","BELL-CVE-2018-1000301","CURL-CVE-2018-1000301","DEBIAN-CVE-2018-1000301","DLA-1379-1","DSA-4202-1","EUVD-2018-1896","GHSA-32q7-x7q9-wcf9","MGASA-2018-0423","RHSA-2018:3157","RHSA-2018:3558","RHSA-2020:0544","RHSA-2020:0594","SUSE-SU-2018:1327-1","SUSE-SU-2018:1327-2","SUSE-SU-2018:1478-1","UBUNTU-CVE-2018-1000301","USN-3648-1","openSUSE-SU-2024:10582-1"],"status":"published","title":"curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read...","description":"curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded RTSP content.. This vulnerability appears to have been fixed in curl \u003c 7.20.0 and curl \u003e= 7.60.0.","severity":{"version":"3.0","score":9.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.0581,"percentile":0.93187,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2018-05-16T00:00:00Z","modified":"2026-10-25T01:05:37Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"curl","fixed_in":["7.60.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"curl","fixed_in":["7.60.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"curl","fixed_in":["7.60.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"curl","fixed_in":["7.60.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"curl","fixed_in":["7.60.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"curl","fixed_in":["7.60.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"curl","fixed_in":["7.60.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"curl","fixed_in":["7.60.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"curl","fixed_in":["7.60.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"curl","fixed_in":["7.60.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"curl","fixed_in":["7.60.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"curl","fixed_in":["7.60.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"curl","fixed_in":["7.60.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"curl","fixed_in":["7.60.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"curl","fixed_in":["7.60.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.4","package":"curl","fixed_in":["7.60.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.5","package":"curl","fixed_in":["7.60.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.6","package":"curl","fixed_in":["7.60.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"curl","fixed_in":["7.60.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"curl","fixed_in":["7.60.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"curl","fixed_in":["7.60.0-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"curl","fixed_in":["7.60.0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"curl","fixed_in":["7.60.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"curl","fixed_in":["7.60.0-1"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"curl","fixed_in":["7.26.0-1+wheezy25+deb7u1"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"curl","fixed_in":["7.38.0-4+deb8u11"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"curl","fixed_in":["7.52.1-5+deb9u6"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 7","package":"curl","fixed_in":["7.37.0-37.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"curl","fixed_in":["7.37.0-37.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"curl","fixed_in":["7.37.0-37.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"curl","fixed_in":["7.37.0-37.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"curl","fixed_in":["7.37.0-37.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"curl","fixed_in":["7.37.0-37.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"curl","fixed_in":["7.37.0-37.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"curl","fixed_in":["7.37.0-37.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"curl","fixed_in":["7.37.0-37.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"curl","fixed_in":["7.37.0-37.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 4","package":"curl","fixed_in":["7.37.0-37.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"curl","fixed_in":["7.37.0-37.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"curl","fixed_in":["7.37.0-70.30.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11-SECURITY","package":"curl-openssl1","fixed_in":["7.37.0-70.30.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"curl","fixed_in":["7.37.0-70.30.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"curl","fixed_in":["7.37.0-70.30.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"curl","fixed_in":["7.35.0-1ubuntu2.16"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"curl","fixed_in":["7.47.0-1ubuntu2.8"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"curl","fixed_in":["7.58.0-2ubuntu3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.20.0"},{"fixed":"7.60.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.20.0"},{"fixed":"7.60.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.20.0"},{"fixed":"7.60.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.20.0"},{"fixed":"7.60.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.20.0"},{"fixed":"7.60.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.20.0"},{"fixed":"7.60.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.20.0"},{"fixed":"7.60.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.20.0"},{"fixed":"7.60.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.20.0"},{"fixed":"7.60.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.20.0"},{"fixed":"7.60.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.20.0"},{"fixed":"7.60.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.20.0"},{"fixed":"7.60.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.20.0"},{"fixed":"7.60.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.20.0"},{"fixed":"7.60.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.20.0"},{"fixed":"7.60.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.4","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.20.0"},{"fixed":"7.60.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.5","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.20.0"},{"fixed":"7.60.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.6","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.20.0"},{"fixed":"7.60.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.20.0"},{"fixed":"7.60.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.20.0"},{"fixed":"7.60.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.20.0"},{"fixed":"7.60.0-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.60.0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.60.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.60.0-1"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.26.0-1+wheezy25+deb7u1"}]}],"versions":["7.26.0-1+wheezy10","7.26.0-1+wheezy11","7.26.0-1+wheezy12","7.26.0-1+wheezy13","7.26.0-1+wheezy14","7.26.0-1+wheezy15","7.26.0-1+wheezy16","7.26.0-1+wheezy17","7.26.0-1+wheezy18","7.26.0-1+wheezy19","7.26.0-1+wheezy2","7.26.0-1+wheezy20","7.26.0-1+wheezy21","7.26.0-1+wheezy22","7.26.0-1+wheezy23","7.26.0-1+wheezy24","7.26.0-1+wheezy25","7.26.0-1+wheezy3","7.26.0-1+wheezy4","7.26.0-1+wheezy5","7.26.0-1+wheezy6","7.26.0-1+wheezy7","7.26.0-1+wheezy8","7.26.0-1+wheezy9"]},{"source":"osv","ecosystem":"Debian:8","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.38.0-4+deb8u11"}]}],"versions":["7.38.0-4","7.38.0-4+deb8u1","7.38.0-4+deb8u10","7.38.0-4+deb8u2","7.38.0-4+deb8u3","7.38.0-4+deb8u4","7.38.0-4+deb8u5","7.38.0-4+deb8u6","7.38.0-4+deb8u7","7.38.0-4+deb8u8","7.38.0-4+deb8u9"]},{"source":"osv","ecosystem":"Debian:9","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.52.1-5+deb9u6"}]}],"versions":["7.52.1-5","7.52.1-5+deb9u1","7.52.1-5+deb9u2","7.52.1-5+deb9u3","7.52.1-5+deb9u4","7.52.1-5+deb9u5"]},{"source":"osv","ecosystem":"Mageia:6","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.54.1-2.7.mga6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-51.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"curl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-51.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-51.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-pem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.3-5.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"nss-pem-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.3-5.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-51.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-51.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"curl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-51.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-51.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-pem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.3-5.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"nss-pem-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.3-5.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-51.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-51.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"curl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-51.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-51.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-51.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-pem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.3-5.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"nss-pem-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.3-5.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-51.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"curl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-51.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-51.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-51.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-pem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.3-5.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"nss-pem-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.3-5.el7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"httpd24-curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.61.1-1.el6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"httpd24-curl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.61.1-1.el6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"httpd24-httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.34-7.el6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"httpd24-httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.34-7.el6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"httpd24-httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.34-7.el6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"httpd24-httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.34-7.el6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"httpd24-httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.34-7.el6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"httpd24-libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.61.1-1.el6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"httpd24-libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.61.1-1.el6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"httpd24-libnghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-7.el6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"httpd24-libnghttp2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-7.el6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"httpd24-mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.34-7.el6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"httpd24-mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.34-7.el6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"httpd24-mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.34-7.el6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"httpd24-mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.34-7.el6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"httpd24-nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-7.el6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"httpd24-nghttp2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-7.el6"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.61.1-1.el7"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-curl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.61.1-1.el7"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-httpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.34-7.el7"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-httpd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.34-7.el7"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-httpd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.34-7.el7"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-httpd-manual","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.34-7.el7"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-httpd-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.34-7.el7"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.61.1-1.el7"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.61.1-1.el7"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-libnghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-7.el7"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-libnghttp2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-7.el7"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-mod_ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.34-7.el7"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-mod_md","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.34-7.el7"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-mod_proxy_html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.34-7.el7"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-mod_session","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.34-7.el7"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-mod_ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.4.34-7.el7"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-nghttp2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-7.el7"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"httpd24-nghttp2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-7.el7"}]}],"bundled":38},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::computenode","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-46.el7_5.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::computenode","package":"curl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-46.el7_5.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::computenode","package":"libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-46.el7_5.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::computenode","package":"libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-46.el7_5.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::server","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-46.el7_5.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::server","package":"curl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-46.el7_5.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::server","package":"libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-46.el7_5.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::server","package":"libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-46.el7_5.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-42.el7_4.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"curl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-42.el7_4.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-42.el7_4.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-42.el7_4.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-42.el7_4.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"curl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-42.el7_4.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-42.el7_4.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-42.el7_4.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.4::server","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-42.el7_4.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.4::server","package":"curl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-42.el7_4.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.4::server","package":"libcurl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-42.el7_4.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.4::server","package":"libcurl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.29.0-42.el7_4.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.37.0-37.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.37.0-37.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.37.0-37.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.37.0-37.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.37.0-37.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.37.0-37.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.37.0-37.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.37.0-37.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.37.0-37.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.37.0-37.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.37.0-37.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.37.0-37.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.37.0-70.30.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11-SECURITY","package":"curl-openssl1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.37.0-70.30.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.37.0-70.30.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.37.0-70.30.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.35.0-1ubuntu2.16"}]}],"versions":["7.32.0-1ubuntu1","7.33.0-1ubuntu1","7.34.0-1ubuntu1","7.35.0-1ubuntu1","7.35.0-1ubuntu2","7.35.0-1ubuntu2.1","7.35.0-1ubuntu2.2","7.35.0-1ubuntu2.3","7.35.0-1ubuntu2.5","7.35.0-1ubuntu2.6","7.35.0-1ubuntu2.7","7.35.0-1ubuntu2.8","7.35.0-1ubuntu2.9","7.35.0-1ubuntu2.10","7.35.0-1ubuntu2.11","7.35.0-1ubuntu2.12","7.35.0-1ubuntu2.13","7.35.0-1ubuntu2.14","7.35.0-1ubuntu2.15"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.47.0-1ubuntu2.8"}]}],"versions":["7.43.0-1ubuntu2","7.45.0-1ubuntu1","7.46.0-1ubuntu1","7.47.0-1ubuntu1","7.47.0-1ubuntu2","7.47.0-1ubuntu2.1","7.47.0-1ubuntu2.2","7.47.0-1ubuntu2.3","7.47.0-1ubuntu2.4","7.47.0-1ubuntu2.5","7.47.0-1ubuntu2.6","7.47.0-1ubuntu2.7"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.58.0-2ubuntu3.1"}]}],"versions":["7.55.1-1ubuntu2","7.55.1-1ubuntu2.1","7.57.0-1ubuntu1","7.58.0-2ubuntu1","7.58.0-2ubuntu2","7.58.0-2ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.35.0-1ubuntu2.16"}]}],"versions":["7.32.0-1ubuntu1","7.33.0-1ubuntu1","7.34.0-1ubuntu1","7.35.0-1ubuntu1","7.35.0-1ubuntu2","7.35.0-1ubuntu2.1","7.35.0-1ubuntu2.2","7.35.0-1ubuntu2.3","7.35.0-1ubuntu2.5","7.35.0-1ubuntu2.6","7.35.0-1ubuntu2.7","7.35.0-1ubuntu2.8","7.35.0-1ubuntu2.9","7.35.0-1ubuntu2.10","7.35.0-1ubuntu2.11","7.35.0-1ubuntu2.12","7.35.0-1ubuntu2.13","7.35.0-1ubuntu2.14","7.35.0-1ubuntu2.15"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.47.0-1ubuntu2.8"}]}],"versions":["7.43.0-1ubuntu2","7.45.0-1ubuntu1","7.46.0-1ubuntu1","7.47.0-1ubuntu1","7.47.0-1ubuntu2","7.47.0-1ubuntu2.1","7.47.0-1ubuntu2.2","7.47.0-1ubuntu2.3","7.47.0-1ubuntu2.4","7.47.0-1ubuntu2.5","7.47.0-1ubuntu2.6","7.47.0-1ubuntu2.7"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.58.0-2ubuntu3.1"}]}],"versions":["7.55.1-1ubuntu2","7.55.1-1ubuntu2.1","7.57.0-1ubuntu1","7.58.0-2ubuntu1","7.58.0-2ubuntu2","7.58.0-2ubuntu3"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"curl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.79.1-1.1"}]}],"bundled":48}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"haxx","product":"curl"},{"vendor":"oracle","product":"communications_webrtc_session_controller"},{"vendor":"oracle","product":"enterprise_manager_ops_center"},{"vendor":"oracle","product":"peoplesoft_enterprise_peopletools"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_workstation"}],"references":[{"url":"http://www.securityfocus.com/bid/104225","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/05/msg00010.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://www.securitytracker.com/id/1040931","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","fix"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3558","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://curl.haxx.se/docs/adv_2018-b138.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","fix","web","article","report"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3157","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/201806-05","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.debian.org/security/2018/dsa-4202","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","fix"]},{"url":"https://usn.ubuntu.com/3648-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/3598-2/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHBA-2019:0327","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","tags":["x_refsource_MISC","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:0544","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:0594","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000301","tags":["advisory"]},{"url":"https://usn.ubuntu.com/3598-2"},{"url":"https://usn.ubuntu.com/3648-1"},{"url":"https://github.com/advisories/GHSA-32q7-x7q9-wcf9"},{"url":"https://security.alpinelinux.org/vuln/CVE-2018-1000301","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2018-1000301","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-1000301","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2018-0423.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=22772","tags":["report"]},{"url":"https://curl.haxx.se/docs/adv_2018-9cd6.html","tags":["web","article"]},{"url":"https://curl.haxx.se/docs/adv_2018-97a2.html","tags":["web","article"]},{"url":"https://curl.haxx.se/docs/adv_2018-b047.html","tags":["web","article"]},{"url":"https://curl.haxx.se/docs/adv_2018-82c2.html","tags":["web"]},{"url":"https://curl.haxx.se/docs/adv_2018-70a2.html","tags":["web"]},{"url":"https://curl.haxx.se/docs/CVE-2018-14618.html","tags":["advisory","article"]},{"url":"https://usn.ubuntu.com/3598-1/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/DOHQJ7DDUE5U4L6FHSUVPFQ7TAZLWSMI/","tags":["web"]},{"url":"https://usn.ubuntu.com/3710-1/","tags":["web"]},{"url":"https://www.debian.org/security/2018/dsa-4286","tags":["web"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.6_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1510247","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1537125","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1542256","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1552628","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1552631","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1553398","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1575536","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1610998","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3157.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1000007","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1000007","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000007","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_2018-b3bf.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1000120","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1000120","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000120","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1000121","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1000121","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000121","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1000122","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1000122","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000122","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1000301","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1000301","tags":["advisory","report"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_software_collections/3/html/3.2_release_notes/chap-rhscl#sect-RHSCL-Changes-httpd","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1362183","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1362190","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1362199","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1373229","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1375906","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1388370","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1388371","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1388377","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1388378","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1388379","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1388382","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1388385","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1388386","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1388388","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1388390","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1388392","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1406712","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1439190","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1478309","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1478310","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1495541","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1503705","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1515757","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1515760","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1518737","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1540167","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1558450","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1560395","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1560399","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1560599","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1560614","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1560634","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1560643","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1605048","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1622707","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1628389","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1633260","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1633399","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1634830","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1640722","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1646937","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1648928","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3558.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5419","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5419","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5419","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_20160803A.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5420","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5420","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5420","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_20160803B.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5421","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5421","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5421","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_20160803C.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7141","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7141","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7141","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_20160907.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-7167","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-7167","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-7167","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_20160914.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-8615","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-8615","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8615","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_20161102A.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-8616","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-8616","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8616","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_20161102B.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-8617","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-8617","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8617","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_20161102C.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-8618","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-8618","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8618","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_20161102D.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-8619","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-8619","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8619","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_20161102E.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-8620","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-8620","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8620","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_20161102F.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-8621","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-8621","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8621","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_20161102G.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-8622","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-8622","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8622","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_20161102H.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-8623","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-8623","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8623","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_20161102I.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-8624","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-8624","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8624","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_20161102J.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-8625","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-8625","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8625","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_20161102K.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-9586","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-9586","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9586","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_20161221A.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-7407","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-7407","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7407","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_20170403.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-8816","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-8816","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-8816","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_2017-12e7.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-8817","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-8817","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-8817","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_2017-ae72.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-15710","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-15710","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-15710","tags":["advisory"]},{"url":"https://httpd.apache.org/security/vulnerabilities_24.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-15715","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-15715","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-15715","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-1000100","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-1000100","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-1000100","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_20170809B.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-1000101","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-1000101","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-1000101","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_20170809A.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-1000254","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-1000254","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-1000254","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_20171004.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-1000257","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-1000257","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-1000257","tags":["advisory"]},{"url":"https://curl.haxx.se/docs/adv_20171023.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1283","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1283","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1283","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1301","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1301","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1301","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1303","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1303","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1303","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1312","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1312","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1312","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1333","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1333","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1333","tags":["advisory"]},{"url":"https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2018-1333","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-11763","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-11763","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-11763","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14618","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14618","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14618","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0544.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0594.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181327-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1086825","tags":["report"]},{"url":"https://bugzilla.suse.com/1092098","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000301","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181327-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181478-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-1000301","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3648-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-3598-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-1000300","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2006-1061","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9586","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9594","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000099","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000100","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000101","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000254","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000257","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7468","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8818","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000005","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000120","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000122","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000300","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14618","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16839","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16842","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16890","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3822","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3823","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5481","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5482","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8231","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8285","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8286","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22297","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22298","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22876","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22890","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22901","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22922","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22924","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22947","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-1000301","description":"curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded RTSP content.. This vulnerability appears to have been fixed in curl \u003c 7.20.0 and curl \u003e= 7.60.0.","status":"published","published":"2018-05-24T13:00:00Z","modified":"2026-04-15T20:58:35.757Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:35:10.685174Z"}],"euvd":[{"id":"EUVD-2018-1896","description":"curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded RTSP content.. This vulnerability appears to have been fixed in curl \u003c 7.20.0 and curl \u003e= 7.60.0.","status":"published","published":"2018-05-24T13:00:00Z","modified":"2026-04-15T20:58:35Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T19:24:24.796113Z"}],"ghsa":[{"id":"GHSA-32q7-x7q9-wcf9","title":"curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read...","description":"curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded RTSP content.. This vulnerability appears to have been fixed in curl \u003c 7.20.0 and curl \u003e= 7.60.0.","status":"published","published":"2022-05-13T01:48:35Z","modified":"2026-04-15T21:30:13Z","cvss":[{"version":"3.0","score":9.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T15:07:30.592661Z"}],"nvd":[{"id":"CVE-2018-1000301","description":"curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded RTSP content.. This vulnerability appears to have been fixed in curl \u003c 7.20.0 and curl \u003e= 7.60.0.","status":"published","published":"2018-05-24T13:29:01.383Z","modified":"2026-06-17T01:32:43.407Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical","assessor":"secondary"},{"version":"3.0","score":9.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:04:27.507872Z"}],"osv":[{"id":"ALPINE-CVE-2018-1000301","description":"curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded RTSP content.. This vulnerability appears to have been fixed in curl \u003c 7.20.0 and curl \u003e= 7.60.0.","status":"published","published":"2018-05-24T13:29:01.383Z","modified":"2026-10-23T17:17:55.15649313Z","cvss":[{"version":"3.0","score":9.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:27:47.187336Z"},{"id":"BELL-CVE-2018-1000301","title":"CVE-2018-1000301 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:13:31.175965Z","modified":"2026-04-25T07:19:24.634349Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:14.701973Z"},{"id":"CVE-2018-1000301","description":"curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded RTSP content.. This vulnerability appears to have been fixed in curl \u003c 7.20.0 and curl \u003e= 7.60.0.","status":"published","published":"2018-05-24T13:29:01.383Z","modified":"2026-10-24T10:30:21.646777317Z","cvss":[{"version":"3.0","score":9.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:07.192756Z"},{"id":"DEBIAN-CVE-2018-1000301","description":"curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded RTSP content.. This vulnerability appears to have been fixed in curl \u003c 7.20.0 and curl \u003e= 7.60.0.","status":"published","published":"2018-05-24T13:29:01.383Z","modified":"2026-10-23T18:02:55.633085313Z","cvss":[{"version":"3.0","score":9.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:29.988046Z"},{"id":"RHSA-2018:3157","title":"Red Hat Security Advisory: curl and nss-pem security and bug fix update","status":"published","published":"2024-09-13T16:54:07Z","modified":"2026-09-21T10:02:02Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"RHSA-2018:3558","title":"Red Hat Security Advisory: httpd24 security, bug fix, and enhancement update","status":"published","published":"2024-09-13T16:54:33Z","modified":"2026-09-21T10:02:03Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:05.383061Z"},{"id":"RHSA-2020:0544","title":"Red Hat Security Advisory: curl security update","status":"published","published":"2024-09-13T16:58:36Z","modified":"2026-09-21T10:02:30Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2020:0594","title":"Red Hat Security Advisory: curl security update","status":"published","published":"2024-09-13T16:58:56Z","modified":"2026-09-21T10:02:31Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"UBUNTU-CVE-2018-1000301","description":"curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded RTSP content.. This vulnerability appears to have been fixed in curl \u003c 7.20.0 and curl \u003e= 7.60.0.","status":"published","published":"2018-05-16T00:00:00Z","modified":"2026-04-27T09:10:20.499553Z","cvss":[{"version":"3.0","score":9.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"},{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:16.544091Z"},{"id":"CURL-CVE-2018-1000301","title":"RTSP bad headers buffer over-read","description":"curl can be tricked into reading data beyond the end of a heap based buffer\nused to store downloaded content.\n\nWhen servers send RTSP responses back to curl, the data starts out with a set\nof headers. curl parses that data to separate it into a number of headers to\ndeal with those appropriately and to find the end of the headers that signal\nthe start of the \"body\" part.\n\nThe function that splits up the response into headers is called\n`Curl_http_readwrite_headers()` and in situations where it cannot find a single\nheader in the buffer, it might end up leaving a pointer pointing into the\nbuffer instead of to the start of the buffer which then later on may lead to\nan out of buffer read when code assumes that pointer points to a full buffer\nsize worth of memory to use.\n\nThis could potentially lead to information leakage but most likely a\ncrash/denial of service for applications if a server triggers this flaw.","status":"published","published":"2018-05-16T08:00:00Z","modified":"2026-10-25T01:05:37.230662947Z","updated_at":"2026-11-02T15:43:55.669514Z"},{"id":"DLA-1379-1","title":"curl - security update","status":"published","published":"2018-05-16T00:00:00Z","modified":"2026-03-09T01:01:14.295674Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"DSA-4202-1","title":"curl - security update","status":"published","published":"2018-05-16T00:00:00Z","modified":"2026-03-09T01:18:12.632263Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"MGASA-2018-0423","title":"Updated curl packages fix security vulnerabilities","description":"Updated curl packages fix security vulnerabilities:\n\nPeter Wu discovered that curl incorrectly handled certain SMTP buffers. A\nremote attacker could use this issue to cause curl to crash, resulting in\na denial of service, or possibly execute arbitrary code (CVE-2018-0500).\n\nZhaoyang Wu discovered that cURL, an URL transfer library, contains a buffer\noverflow in the NTLM authentication code triggered by passwords that exceed\n2GB in length on 32bit systems (CVE-2018-14618).\n\nPhan Thanh discovered that curl incorrectly handled certain FTP paths.\nAn attacker could use this to cause a denial of service or possibly\nexecute arbitrary code (CVE-2018-1000120).\n\nDario Weisser discovered that curl incorrectly handled certain LDAP URLs.\nAn attacker could possibly use this issue to cause a denial of service\n(CVE-2018-1000121).\n\nMax Dymond discovered that curl incorrectly handled certain RTSP data. An\nattacker could possibly use this to cause a denial of service or even to\nget access to sensitive data (CVE-2018-1000122).\n\nA heap-based buffer overflow can happen when closing down an FTP connection\nwith very long server command replies. When doing FTP transfers, curl keeps\na spare \"closure handle\" around internally that will be used when an FTP\nconnection gets shut down since the original curl easy handle is then\nalready removed. FTP server response data that gets cached from the original\ntransfer might then be larger than the default buffer size (16 KB) allocated\nin the \"closure handle\", which can lead to a buffer overwrite. The contents\nand size of that overwrite is controllable by the server (CVE-2018-1000300).\n\ncurl can be tricked into reading data beyond the end of a heap based buffer\nused to store downloaded content. When servers send RTSP responses back to\ncurl, the data starts out with a set of headers. curl parses that data to\nseparate it into a number of headers to deal with those appropriately and to\nfind the end of the headers that signal the start of the \"body\" part. The\nfunction that splits up the response into headers is called\n\"Curl_http_readwrite_headers()\" and in situations where it can't find a\nsingle header in the buffer, it might end up leaving a pointer pointing\ninto the buffer instead of to the start of the buffer which then later on\nmay lead to an out of buffer read when code assumes that pointer points to\na full buffer size worth of memory to use. This could potentially lead to\ninformation leakage but most likely a crash/denial of service for\napplications if a server triggers this flaw (CVE-2018-1000301).\n","status":"published","published":"2018-10-30T18:01:43Z","modified":"2026-04-16T06:23:07.715763588Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"openSUSE-SU-2024:10582-1","title":"curl-7.79.1-1.1 on GA media","description":"These are all security issues fixed in the curl-7.79.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:40:36.472951Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2018:1327-1","title":"Security update for curl","description":"This update for curl fixes several issues:\n\nSecurity issues fixed:\n\n- CVE-2018-1000301: Fixed a RTSP bad headers buffer over-read could crash the curl client (bsc#1092098)\n\nNon security issues fixed:\n\n- If the DEFAULT_SUSE cipher list is not available use the HIGH cipher alias before failing.\n  (bsc#1086825)\n","status":"published","published":"2018-05-17T06:42:05Z","modified":"2026-02-04T02:19:36.346868Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2018:1327-2","title":"Security update for curl","description":"This update for curl fixes several issues:\n\nSecurity issues fixed:\n\n- CVE-2018-1000301: Fixed a RTSP bad headers buffer over-read could crash the curl client (bsc#1092098)\n\nNon security issues fixed:\n\n- If the DEFAULT_SUSE cipher list is not available use the HIGH cipher alias before failing.\n  (bsc#1086825)\n","status":"published","published":"2018-10-18T12:43:44Z","modified":"2026-02-04T04:19:39.027692Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2018:1478-1","title":"Security update for curl","description":"This update for curl fixes the following issues:\n\n- CVE-2018-1000301: Fixed a buffer over-read caused by bad RTSP headers (bsc#1092098)\n","status":"published","published":"2018-05-30T13:19:18Z","modified":"2026-02-04T03:34:19.114615Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"USN-3648-1","title":"curl vulnerabilities","description":"Dario Weisser discovered that curl incorrectly handled long FTP server\ncommand replies. If a user or automated system were tricked into connecting\nto a malicious FTP server, a remote attacker could use this issue to cause\ncurl to crash, resulting in a denial of service, or possibly execute\narbitrary code. This issue only affected Ubuntu 17.10 and Ubuntu 18.04 LTS.\n(CVE-2018-1000300)\n\nMax Dymond discovered that curl incorrectly handled certain RTSP responses.\nIf a user or automated system were tricked into connecting to a malicious\nserver, a remote attacker could use this issue to cause curl to crash,\nresulting in a denial of service, or possibly obtain sensitive information.\n(CVE-2018-1000301)\n","status":"published","published":"2018-05-16T11:55:59Z","modified":"2026-04-27T09:16:09.266124Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}