Description
libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the parser might end up using -1 for the length of the *time fraction*, leading to a `strlen()` getting performed on a pointer to a heap buffer area that is not (purposely) null terminated. This flaw most likely leads to a crash, but can also lead to heap contents getting returned to the application when [CURLINFO_CERTINFO](https://curl.se/libcurl/c/CURLINFO_CERTINFO.html) is used.
Reserved 2024-07-30 | Published 2024-07-31 | Updated 2024-10-30 | Assigner
curlProblem types
CWE-125 Out-of-bounds Read
Product status
Default status
unaffected
8.9.0
affected
8.8.0
affected
8.7.1
affected
8.7.0
affected
8.6.0
affected
8.5.0
affected
8.4.0
affected
8.3.0
affected
8.2.1
affected
8.2.0
affected
8.1.2
affected
8.1.1
affected
8.1.0
affected
8.0.1
affected
8.0.0
affected
7.88.1
affected
7.88.0
affected
7.87.0
affected
7.86.0
affected
7.85.0
affected
7.84.0
affected
7.83.1
affected
7.83.0
affected
7.82.0
affected
7.81.0
affected
7.80.0
affected
7.79.1
affected
7.79.0
affected
7.78.0
affected
7.77.0
affected
7.76.1
affected
7.76.0
affected
7.75.0
affected
7.74.0
affected
7.73.0
affected
7.72.0
affected
7.71.1
affected
7.71.0
affected
7.70.0
affected
7.69.1
affected
7.69.0
affected
7.68.0
affected
7.67.0
affected
7.66.0
affected
7.65.3
affected
7.65.2
affected
7.65.1
affected
7.65.0
affected
7.64.1
affected
7.64.0
affected
7.63.0
affected
7.62.0
affected
7.61.1
affected
7.61.0
affected
7.60.0
affected
7.59.0
affected
7.58.0
affected
7.57.0
affected
7.56.1
affected
7.56.0
affected
7.55.1
affected
7.55.0
affected
7.54.1
affected
7.54.0
affected
7.53.1
affected
7.53.0
affected
7.52.1
affected
7.52.0
affected
7.51.0
affected
7.50.3
affected
7.50.2
affected
7.50.1
affected
7.50.0
affected
7.49.1
affected
7.49.0
affected
7.48.0
affected
7.47.1
affected
7.47.0
affected
7.46.0
affected
7.45.0
affected
7.44.0
affected
7.43.0
affected
7.42.1
affected
7.42.0
affected
7.41.0
affected
7.40.0
affected
7.39.0
affected
7.38.0
affected
7.37.1
affected
7.37.0
affected
7.36.0
affected
7.35.0
affected
7.34.0
affected
7.33.0
affected
7.32.0
affected
Credits
Dov Murik (Transmit Security) finder
Stefan Eissing remediation developer
References
curl.se/docs/CVE-2024-7264.json (json)
curl.se/docs/CVE-2024-7264.html (www)
hackerone.com/reports/2629968 (issue)
www.openwall.com/lists/oss-security/2024/07/31/1
cve.org (CVE-2024-7264)
nvd.nist.gov (CVE-2024-7264)
Download JSON
Subscribe to our newsletter to learn more about our work.
