CVE-2018-1000120

curl: FTP path trickery leads to NIL byte out of bounds write

Loading…

Severity

Moderate

Red Hat Product Security

5.4

CVSS 3.0

Review impact separately from score.

Published · March 14, 2018

Updated · September 21, 2026

Description

It was found that libcurl did not safely parse FTP URLs when using the CURLOPT_FTP_FILEMETHOD method. An attacker, able to provide a specially crafted FTP URL to an application using libcurl, could write a NULL byte at an arbitrary location, resulting in a crash or an unspecified behavior.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

Preventing application from using non-default CURLOPT_FTP_FILEMETHOD will avoid triggering the vulnerable code.

CVSS / CWE

CVSS 3.0 · 5.4
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

CWE-787 · Out-of-bounds Write