CVE-2016-9594

Description

curl before version 7.52.1 is vulnerable to an uninitialized random in libcurl's internal function that returns a good 32bit random value. Having a weak or virtually non-existent random value makes the operations that use it vulnerable.

CVSS Metrics

• v3.0•MEDIUM•Score: 6.5CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
• v3.0•HIGH•Score: 8.1CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
• v2.0•MEDIUM•Score: 6.8AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS Trends

Current EPSS score: 0.69%• Percentile: 72%

Techniques & Countermeasures

• CWE-665•Improper Initialization

  The product does not initialize or incorrectly initializes a resource, which might leave the resource in an unexpected state when it is accessed or used.

Affected Systems

• haxx•curl

  < 7.52.1

• unspecified•curl

  curl 7.52.1

References (6)

• http://www.securityfocus.com/bid/95094
• https://curl.haxx.se/docs/adv_20161223.html
• https://www.tenable.com/security/tns-2017-04
• http://www.securitytracker.com/id/1037528
• https://security.gentoo.org/glsa/201701-47
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9594