SUSE-SU-2018:3681-1

Advisory lineage Upstream: 2 Downstream: 0
Published: 08 Nov 2018, 16:55
Last modified:04 Feb 2026, 02:14

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

08 Nov 2018, 16:55
Published
Vulnerability first disclosed
04 Feb 2026, 02:14
Last Modified
Vulnerability information updated

Description

Security update for curl This update for curl fixes the following issues: - CVE-2018-16840: A use-after-free in SASL handle close was fixed (bsc#1112758) - CVE-2018-16842: A Out-of-bounds Read in tool_msgs.c was fixed which could lead to crashes (bsc#1113660)

Affected Systems

  • suse•curl-openssl1&distro=SUSE Linux Enterprise Server 11-SECURITY

    < 7.37.0-70.38.1

  • suse•curl&distro=SUSE Linux Enterprise Server 11 SP4

    < 7.37.0-70.38.1

  • suse•curl&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4

    < 7.37.0-70.38.1

  • suse•curl&distro=SUSE Linux Enterprise Software Development Kit 11 SP4

    < 7.37.0-70.38.1

References (5)