Critical severity9.8NVD Advisory· Published Nov 29, 2017· Updated May 13, 2026

CVE-2017-8818

Description

curl and libcurl before 7.57.0 on 32-bit platforms allow attackers to cause a denial of service (out-of-bounds access and application crash) or possibly have unspecified other impact because too little memory is allocated for interfacing to an SSL library.

Affected products

Haxx/Curl2 versions
cpe:2.3:a:haxx:curl:7.56.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:haxx:curl:7.56.0:*:*:*:*:*:*:*
- cpe:2.3:a:haxx:curl:7.56.1:*:*:*:*:*:*:*
Haxx/Libcurl2 versions
cpe:2.3:a:haxx:libcurl:7.56.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:haxx:libcurl:7.56.0:*:*:*:*:*:*:*
- cpe:2.3:a:haxx:libcurl:7.56.1:*:*:*:*:*:*:*
N/a/Curl And Libcurl Before 7.57.0v5
Range: curl and libcurl before 7.57.0

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

curl.haxx.se/docs/adv_2017-af0a.htmlnvdPatchVendor Advisory
security.cucumberlinux.com/security/details.phpnvdThird Party Advisory
www.securityfocus.com/bid/102014nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1039898nvdThird Party AdvisoryVDB Entry
security.gentoo.org/glsa/201712-04nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000