Critical severity9.8NVD Advisory· Published Nov 29, 2017· Updated Jun 17, 2026

CVE-2017-8818

Description

curl and libcurl before 7.57.0 on 32-bit platforms allow attackers to cause a denial of service (out-of-bounds access and application crash) or possibly have unspecified other impact because too little memory is allocated for interfacing to an SSL library.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Curl/Curl2 versions
cpe:2.3:a:haxx:curl:7.56.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:haxx:curl:7.56.0:*:*:*:*:*:*:*
- cpe:2.3:a:haxx:curl:7.56.1:*:*:*:*:*:*:*
Curl/Libcurl2 versions
cpe:2.3:a:haxx:libcurl:7.56.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:haxx:libcurl:7.56.0:*:*:*:*:*:*:*
- cpe:2.3:a:haxx:libcurl:7.56.1:*:*:*:*:*:*:*
osv-coords
pkg:rpm/opensuse/curl&distro=openSUSE%20Tumbleweed
Range: < 7.79.1-1.1

Patches

Vulnerability mechanics

References

curl.haxx.se/docs/adv_2017-af0a.htmlnvdPatchVendor Advisory
security.cucumberlinux.com/security/details.phpnvdThird Party Advisory
www.securityfocus.com/bid/102014nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1039898nvdThird Party AdvisoryVDB Entry
security.gentoo.org/glsa/201712-04nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000