PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›CVE-2017-1000257

CVE-2017-1000257

curl: IMAP FETCH response out of bounds read

Loading…

Severity

Moderate

Red Hat Product Security

4.8

CVSS 3.0

Review impact separately from score.

Published · October 23, 2017

Updated · September 21, 2026

Description

A buffer overrun flaw was found in the IMAP handler of libcurl. By tricking an unsuspecting user into connecting to a malicious IMAP server, an attacker could exploit this flaw to potentially cause information disclosure or crash the application.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

Switch off IMAP in CURLOPT_PROTOCOLS

CVSS / CWE

CVSS 3.0 · 4.8
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L

CWE-125 · Out-of-bounds Read