CVE-2018-1000301: canonical ubuntu_linux Out-of-bounds Read
Vulnerability summary
CVE-2018-1000301 is a critical (CVSS 9.1) Out-of-bounds Read vulnerability in canonical ubuntu_linux. EPSS estimates a 5.92% chance of exploitation in the next 30 days, higher than 93.1% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 7 · Related 2Timeline
- 24-05-2018PublishedVulnerability first disclosed.
- 15-04-2026Last modifiedVulnerability information updated.
Description
curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded RTSP content.. This vulnerability appears to have been fixed in curl < 7.20.0 and curl >= 7.60.0.
CVSS metrics
8 scores · 5 sources · 3 versions- NVDNIST9.1CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
- OSV · UbuntuEcosystem advisory · calculated9.1CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
- OSV · AlpineEcosystem advisory · calculated9.1CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
- OSV · UbuntuEcosystem advisory · calculated9.1CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
- OSV · DebianEcosystem advisory · calculated9.1CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
EPSS trend
Probability
5.92%
Chance of exploitation in the next 30 days
Percentile
93%
Versus all other CVEs
30-day change
-0.12 pp
From 6.04% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Suse16 products
- curl-openssl1&distro=SUSE Linux Enterprise Server 11-SECURITY< 7.37.0-70.30.1
- curl&distro=SUSE Enterprise Storage 4< 7.37.0-37.23.1
- curl&distro=SUSE Linux Enterprise Desktop 12 SP3< 7.37.0-37.23.1
- curl&distro=SUSE Linux Enterprise Server 11 SP4< 7.37.0-70.30.1
- curl&distro=SUSE Linux Enterprise Server 12 SP1-LTSS< 7.37.0-37.23.1
Oracle3 products
- communications_webrtc_session_controller< 7.2
- enterprise_manager_ops_center12.2.2 | 12.3.3
- peoplesoft_enterprise_peopletools8.55 | 8.56 | 8.57
Redhat3 products
Debian2 products
- curl< 7.60.0-1 | < 7.38.0-4+deb8u11 | < 7.52.1-5+deb9u6 | < 7.26.0-1+wheezy25+deb7u1
- debian_linuxEOL7.0 | 8.0 | 9.0
Alpine1 product
- curl≥ 7.20.0, < 7.60.0-r0
Canonical1 product
- ubuntu_linuxEOL12.04 | 14.04 | 16.04 | 17.10 | 18.04
Haxx1 product
- curl≥ 7.20.0, ≤ 7.59.0
Ubuntu1 product
- curl< 7.35.0-1ubuntu2.16 | < 7.47.0-1ubuntu2.8 | < 7.58.0-2ubuntu3.1
8 vendors · 28 products
References
29 links
lists.debian.org/debian-lts-announce/2018/05/msg00010.htmlMailing ListX Refsource MLISTThird Party Advisory- www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.htmlX Refsource CONFIRMPatchThird Party Advisory