VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 8, 2013· Updated Jun 16, 2026

CVE-2013-0249

CVE-2013-0249

Description

Stack-based buffer overflow in the Curl_sasl_create_digest_md5_message function in lib/curl_sasl.c in curl and libcurl 7.26.0 through 7.28.1, when negotiating SASL DIGEST-MD5 authentication, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the realm parameter in a (1) POP3, (2) SMTP or (3) IMAP message.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

12
  • Curl/Curl5 versions
    cpe:2.3:a:haxx:curl:7.26.0:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:haxx:curl:7.26.0:*:*:*:*:*:*:*
    • cpe:2.3:a:haxx:curl:7.27.0:*:*:*:*:*:*:*
    • cpe:2.3:a:haxx:curl:7.28.0:*:*:*:*:*:*:*
    • cpe:2.3:a:haxx:curl:7.28.1:*:*:*:*:*:*:*
    • (no CPE)range: 7.26.0 - 7.28.1
  • Curl/Libcurl5 versions
    cpe:2.3:a:haxx:libcurl:7.26.0:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:haxx:libcurl:7.26.0:*:*:*:*:*:*:*
    • cpe:2.3:a:haxx:libcurl:7.27.0:*:*:*:*:*:*:*
    • cpe:2.3:a:haxx:libcurl:7.28.0:*:*:*:*:*:*:*
    • cpe:2.3:a:haxx:libcurl:7.28.1:*:*:*:*:*:*:*
    • (no CPE)range: 7.26.0 - 7.28.1
  • Canonical/Ubuntu Linux
    cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*
  • osv-coords
    pkg:rpm/opensuse/curl&distro=openSUSE%20Tumbleweed
    Range: < 7.51.0-1.1

Patches

Vulnerability mechanics

References

13

News mentions

0

No linked articles in our index yet.