Alpine/curl: critical 9.1
An IMAP FETCH response line indicates the size of the returned data, in number of bytes. When that response says the data is zero bytes, libcurl would pass on that (non-existing) data with a pointer a
Action: Upgrade curl to 7.56.1-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.56.1-r0 | - |
Fixed versions
| 7.56.1-r0 |
Sources
- osv: ALPINE-CVE-2017-1000257#Alpine:v3.9/curl
- https://security.alpinelinux.org/vuln/CVE-2017-1000257
published · modified · JSON