CVE-2016-8621CWE-125

The `curl_getdate` function in curl before version 7.51.0 is vulnerable to an out of bounds read if it receives an input with one digit short

Medium · published July 31, 2018

CVSS v3.0
5.3
EPSS
5%
Percentile
91.9
In the wild
Unconfirmed
What it is

The `curl_getdate` function in curl before version 7.51.0 is vulnerable to an out of bounds read if it receives an input with one digit short.

The record
Technical detail
CVSS v3.0
5.3 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.04824 · 91.9th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2018-07-31T22:00Z
EPSS history
Timeline
  • 31 JUL 22:00Z
    The `curl_getdate` function in curl before version 7.51.0 is vulnerable to an out of bounds read if it receives an input with one digit short
    cvelistv5