SUSE-SU-2018:3624-1
Advisory lineage Upstream: 3 Downstream: 0
Published: 05 Nov 2018, 16:55
Last modified:04 Feb 2026, 03:02
Vulnerability Summary
Overall Risk (default)
minimal
0/100 CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
05 Nov 2018, 16:55
Published
Vulnerability first disclosed
04 Feb 2026, 03:02
Last Modified
Vulnerability information updated
Description
Security update for curl This update for curl fixes the following issues: - CVE-2018-16839: A SASL password overflow via integer overflow was fixed which could lead to crashes (bsc#1112758) - CVE-2018-16840: A use-after-free in SASL handle close was fixed which could lead to crashes (bsc#1112758) - CVE-2018-16842: A Out-of-bounds Read in tool_msgs.c was fixed which could lead to crashes (bsc#1113660)
Affected Systems
- suse•curl&distro=SUSE Linux Enterprise Module for Basesystem 15
< 7.60.0-3.14.3