Description

The smb_request_state function in cURL and libcurl 7.40.0 through 7.42.1 allows remote SMB servers to obtain sensitive information from memory or cause a denial of service (out-of-bounds read and crash) via crafted length and offset values.

Remediation

References

CVE-2015-3237

Related Vulnerabilities

WordPress Plugin WordPress Leads Cross-Site Scripting (1.6.2)

WordPress Plugin WP Selected Text Sharer Multiple Vulnerabilities (1.0)

GlassFish Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2015-7182)

Oracle Database Server CVE-2020-2517 Vulnerability (CVE-2020-2517)

WordPress Plugin Video Downloader for TikTok Directory Traversal (1.3)

Severity

Medium

Classification

CVE-2015-3237 CWE-20

Tags

Missing Update Known Vulnerabilities