Out-of-bounds Read Affecting curl package, versions <8.9.0-r0
Threat Intelligence
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-ALPINE320-CURL-7558115
- published 25 Jul 2024
- disclosed 24 Jul 2024
Introduced: 24 Jul 2024
CVE-2024-6874 Open this link in a new tabHow to fix?
Upgrade Alpine:3.20 curl to version 8.9.0-r0 or higher.
NVD Description
Note: Versions mentioned in the description apply only to the upstream curl package and not the curl package as distributed by Alpine.
See How to fix? for Alpine:3.20 relevant fixed versions and status.
libcurl's URL API function curl_url_get() offers punycode conversions, to and from IDN. Asking to convert a name that is exactly 256 bytes, libcurl ends up reading outside of a stack based buffer when built to use the macidn IDN backend. The conversion function then fills up the provided buffer exactly - but does not null terminate the string.
This flaw can lead to stack contents accidently getting returned as part of the converted string.