CVE-2018-16842: canonical ubuntu_linux Out-of-bounds Read
Vulnerability summary
CVE-2018-16842 is a critical (CVSS 9.1) Out-of-bounds Read vulnerability in canonical ubuntu_linux. EPSS estimates a 2.10% chance of exploitation in the next 30 days, higher than 81.7% of scored vulnerabilities.
Not severe (CVSS 4.4, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 8 · Related 6Timeline
- 31-10-2018PublishedVulnerability first disclosed.
- 15-04-2026Last modifiedVulnerability information updated.
Description
Curl versions 7.14.1 through 7.61.1 are vulnerable to a heap-based buffer over-read in the tool_msgs.c:voutf() function that may result in information exposure and denial of service.
CVSS metrics
7 scores · 6 sources · 2 versions- CVE.orgCNA4.4MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:LDiffers
- OSV · AlpineEcosystem advisory · calculated9.1CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
- OSV · Red hatEcosystem advisory · calculated3.6LowCVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:LDiffers
- OSV · UbuntuEcosystem advisory · calculated4.4MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:LDiffers
- OSV · DebianEcosystem advisory · calculated9.1CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
EPSS trend
Probability
2.10%
Chance of exploitation in the next 30 days
Percentile
82%
Versus all other CVEs
30-day change
No change 0.00 pp
From 2.10% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: local access, no authentication, user interaction (CVSS vector). Other conditions: not stated in public data.
Redhat4 products
- curl< 0:7.29.0-54.el7
- curl-debuginfo< 0:7.29.0-54.el7
- libcurl< 0:7.29.0-54.el7
- libcurl-devel< 0:7.29.0-54.el7
Debian2 products
- curl< 7.62.0-1
- debian_linuxEOL8.0 | 9.0
Alpine1 product
- curl≥ 7.14.1, < 7.62.0-r0 | ≥ 7.14.1, < 7.61.1-r1
Canonical1 product
- ubuntu_linuxEOL12.04 | 14.04 | 16.04 | 18.04 | 18.10
Haxx1 product
- curl≥ 7.14.1, ≤ 7.61.1
Suse1 product
- curl&distro=SUSE Studio Onsite 1.3< 7.19.7-1.20.53.19.1
The curl project1 product
- curl:from 7.14.1 to 7.61.1
Ubuntu1 product
- curl< 7.35.0-1ubuntu2.19 | < 7.47.0-1ubuntu2.11 | < 7.58.0-2ubuntu3.5
8 vendors · 12 products
References
28 links
- lists.debian.org/debian-lts-announce/2018/11/msg00005.htmlMailing ListX Refsource MLISTThird Party Advisory
- bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16842X Refsource CONFIRMIssue TrackingThird Party Advisory
- github.com/curl/curl/commit/d530e92f59ae9bb2d47066c3c460b25d2ffeb211X Refsource CONFIRMPatchThird Party Advisory
