CVE-2017-8816

Summary

The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denial of service (integer overflow and resultant buffer overflow, and application crash) or possibly have unspecified other impact via vectors involving long user and password fields.

Affected Software

VendorProductVersion RangeStatus
n/acurl and libcurl before 7.57.0curl and libcurl before 7.57.0affected

Weaknesses

  • integer overflow

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: total

References