{"id":"CURL-CVE-2017-9502","summary":"URL file scheme drive letter buffer overflow","details":"When libcurl is given either\n\n 1. a file: URL that does not use two slashes following the colon, or\n 2. is told that file is the default scheme to use for URLs without scheme\n\n... and the given path starts with a drive letter and libcurl is built for\nWindows or DOS, then libcurl would copy the path with a wrong offset, so that\nthe end of the given path would write beyond the malloc buffer. Up to seven\nbytes too much.","aliases":["CVE-2017-9502"],"modified":"2024-07-02T09:22:24Z","published":"2017-06-14T08:00:00Z","database_specific":{"www":"https://curl.se/docs/CVE-2017-9502.html","severity":"High","last_affected":"7.54.0","affects":"both","package":"curl","URL":"https://curl.se/docs/CVE-2017-9502.json","CWE":{"desc":"Heap-based Buffer Overflow","id":"CWE-122"}},"affected":[{"ranges":[{"type":"SEMVER","events":[{"introduced":"7.53.0"},{"fixed":"7.54.1"}]},{"type":"GIT","repo":"https://github.com/curl/curl.git","events":[{"introduced":"1d4202ade602dd4f1192c69aed5cc905e7a9b4e2"},{"fixed":"5d7952f52e410e1d4a8ff1965e5cc6fc1bde86aa"}]}],"versions":["7.54.0","7.53.1","7.53.0"],"database_specific":{"source":"https://curl.se/docs/CURL-CVE-2017-9502.json","vanir_signatures":[{"digest":{"function_hash":"266129347539707844623977793203611249510","length":7020},"source":"https://github.com/curl/curl.git/commit/5d7952f52e410e1d4a8ff1965e5cc6fc1bde86aa","target":{"function":"parseurlandfillconn","file":"lib/url.c"},"signature_type":"Function","id":"CURL-CVE-2017-9502-bef13ddc","deprecated":false,"signature_version":"v1"},{"digest":{"line_hashes":["77019411960562870506154579792395984597","110563004083793725130863967434318543309","139645591516437034202164075299295070964","140512268865760139129849858040521466005","81883257301821446656064499748974461330","222988069859926090817973227542319202984","241945608252580017322982663572325432168","18420600275651290921761966777926420646","286345502631307420807368422325559415653","99510905949824577019248636514160310010","116318659394780638975780029403642105212","220690396905256019400298788442968356866"],"threshold":0.9},"source":"https://github.com/curl/curl.git/commit/5d7952f52e410e1d4a8ff1965e5cc6fc1bde86aa","target":{"file":"lib/url.c"},"signature_type":"Line","id":"CURL-CVE-2017-9502-f733d0fb","deprecated":false,"signature_version":"v1"}]}}],"schema_version":"1.7.3","credits":[{"name":"Marcel Raad","type":"FINDER"},{"name":"Daniel Stenberg","type":"REMEDIATION_DEVELOPER"}]}