{ "schema_version": "1.4.0", "id": "GHSA-65fc-r6mj-6v9j", "modified": "2022-05-02T06:15:13Z", "published": "2022-05-02T06:15:13Z", "aliases": [ "CVE-2010-0734" ], "details": "content_encoding.c in libcurl 7.10.5 through 7.19.7, when zlib is enabled, does not properly restrict the amount of callback data sent to an application that requests automatic decompression, which might allow remote attackers to cause a denial of service (application crash) or have unspecified other impact by sending crafted compressed data to an application that relies on the intended data-length limit.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-0734" }, { "type": "WEB", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=563220" }, { "type": "WEB", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10760" }, { "type": "WEB", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6756" }, { "type": "WEB", "url": "http://curl.haxx.se/docs/adv_20100209.html" }, { "type": "WEB", "url": "http://curl.haxx.se/docs/security.html#20100209" }, { "type": "WEB", "url": "http://curl.haxx.se/libcurl-contentencoding.patch" }, { "type": "WEB", "url": "http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html" }, { "type": "WEB", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036744.html" }, { "type": "WEB", "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/037143.html" }, { "type": "WEB", "url": "http://secunia.com/advisories/38843" }, { "type": "WEB", "url": "http://secunia.com/advisories/38981" }, { "type": "WEB", "url": "http://secunia.com/advisories/39087" }, { "type": "WEB", "url": "http://secunia.com/advisories/39734" }, { "type": "WEB", "url": "http://secunia.com/advisories/40220" }, { "type": "WEB", "url": "http://secunia.com/advisories/45047" }, { "type": "WEB", "url": "http://secunia.com/advisories/48256" }, { "type": "WEB", "url": "http://security.gentoo.org/glsa/glsa-201203-02.xml" }, { "type": "WEB", "url": "http://support.apple.com/kb/HT4188" }, { "type": "WEB", "url": "http://support.avaya.com/css/P8/documents/100081819" }, { "type": "WEB", "url": "http://wiki.rpath.com/Advisories:rPSA-2010-0072" }, { "type": "WEB", "url": "http://www.debian.org/security/2010/dsa-2023" }, { "type": "WEB", "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:062" }, { "type": "WEB", "url": "http://www.openwall.com/lists/oss-security/2010/02/09/5" }, { "type": "WEB", "url": "http://www.openwall.com/lists/oss-security/2010/03/09/1" }, { "type": "WEB", "url": "http://www.openwall.com/lists/oss-security/2010/03/16/11" }, { "type": "WEB", "url": "http://www.redhat.com/support/errata/RHSA-2010-0329.html" }, { "type": "WEB", "url": "http://www.securityfocus.com/archive/1/514490/100/0/threaded" }, { "type": "WEB", "url": "http://www.securityfocus.com/archive/1/516397/100/0/threaded" }, { "type": "WEB", "url": "http://www.ubuntu.com/usn/USN-1158-1" }, { "type": "WEB", "url": "http://www.vmware.com/security/advisories/VMSA-2011-0003.html" }, { "type": "WEB", "url": "http://www.vupen.com/english/advisories/2010/0571" }, { "type": "WEB", "url": "http://www.vupen.com/english/advisories/2010/0602" }, { "type": "WEB", "url": "http://www.vupen.com/english/advisories/2010/0660" }, { "type": "WEB", "url": "http://www.vupen.com/english/advisories/2010/0725" }, { "type": "WEB", "url": "http://www.vupen.com/english/advisories/2010/1481" } ], "database_specific": { "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2010-03-19T19:30:00Z" } }