CVE Database›Document archive›CVE-2016-7167

CVE-2016-7167

curl: escape and unescape integer overflows

Loading…

Severity

Low

Red Hat Product Security

2.9

CVSS 3.0

Review impact separately from score.

Published · September 14, 2016

Updated · September 21, 2026

Description

Multiple integer overflow flaws leading to heap-based buffer overflows were found in the way curl handled escaping and unescaping of data. An attacker could potentially use these flaws to crash an application using libcurl by sending a specially crafted input to the affected libcurl functions.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.0 · 2.9
CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

CVSS 2.0 · 4.3
AV:N/AC:M/Au:N/C:N/I:N/A:P

CWE-190 · Integer Overflow or Wraparound