CVE-2010-0734

Scores

EPSS

0.039very_low3.9%
0%20%40%60%80%100%

Percentile: 3.9%

CVSS

5.1medium2.0
0246810

CVSS Score: 5.1/10

All CVSS Scores

CVSS 2.0
5.1

Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P

Description

content_encoding.c in libcurl 7.10.5 through 7.19.7, when zlib is enabled, does not properly restrict the amount of callback data sent to an application that requests automatic decompression, which might allow remote attackers to cause a denial of service (application crash) or have unspecified other impact by sending crafted compressed data to an application that relies on the intended data-length limit.

Scaner-VS 7 — a modern vulnerability management solution

Uses this database for vulnerability detection. High-speed search, cross-platform, advanced configuration audit, and flexible filtering. Suitable for organizations of any size.
Learn more about Scaner-VS 7

Sources

debiannvdredhatubuntu

CWEs

CWE-264

Related Vulnerabilities

Vulnerable Software (6)

Type: Configuration

Product: curl

Operating System: ubuntu hardy 8.04

Trait:
{  "fixed": "7.18.0-1ubuntu2.3"}

Source: ubuntu

Type: Configuration

Product: curl

Operating System: rhel 3

Trait:
{  "fixed": "7.10.6-11.rhel3"}

Source: redhat

Type: Configuration

Product: curl

Operating System: rhel 4

Trait:
{  "fixed": "7.12.1-11.1.el4_8.3"}

Source: redhat

Type: Configuration

Product: curl

Operating System: rhel 5

Trait:
{  "fixed": "7.15.5-9.el5"}

Source: redhat

Type: Configuration

Product: curl

Operating System: debian

Trait:
{  "fixed": "7.20.0-1"}

Source: debian

Type: Configuration

Vendor: curl

Product: libcurl

Operating System: * * *

Trait:
{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:a:curl:libcurl:7.10.5:*:*:*:*:*:*:*",      "vulnerable": true    },    {      "cpe23uri": "cpe:2.3:a:curl:libcurl:7.10.6:*:*:*:*:*:*:*",      "...

Source: nvd