Detections
Analytics

Alpine: curl: security update to 7.56.0-r0

high Tenable Cloud Security Plugin ID 403974

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - libcurl may read outside of a heap allocated buffer when doing FTP. When libcurl connects to an FTP server
 and successfully logs in (anonymous or not), it asks the server for the current directory with the `PWD`
 command. The server then responds with a 257 response containing the path, inside double quotes. The
 returned path name is then kept by libcurl for subsequent uses. Due to a flaw in the string parser for
 this directory name, a directory name passed like this but without a closing double quote would lead to
 libcurl not adding a trailing NUL byte to the buffer holding the name. When libcurl would then later
 access the string, it could read beyond the allocated heap buffer and crash or wrongly access data beyond
 the buffer, thinking it was part of the path. A malicious server could abuse this fact and effectively
 prevent libcurl-based clients to work with it - the PWD command is always issued on new FTP connections
 and the mistake has a high chance of causing a segfault. The simple fact that this has issue remained
 undiscovered for this long could suggest that malformed PWD responses are rare in benign servers. We are
 not aware of any exploit of this flaw. This bug was introduced in commit
 [415d2e7cb7](https://github.com/curl/curl/commit/415d2e7cb7), March 2005. In libcurl version 7.56.0, the
 parser always zero terminates the string but also rejects it if not terminated properly with a final
 double quote. (CVE-2017-1000254)

See Also

https://security.alpinelinux.org/vuln/CVE-2017-1000254

Plugin Details

Severity: High

ID: 403974

Version: Revision 1.27

Type: Local

Published: 10/31/2023

Updated: 7/2/2026

Supported Sensors: Agentless Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.18

CVSS v2

Risk Factor: Medium

Base Score: 5

Temporal Score: 3.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS Score Source: CVE-2017-1000254

CVSS v3

Risk Factor: High

Base Score: 7.5

Temporal Score: 6.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 10/4/2017

Reference Information

CVE: CVE-2017-1000254

BID: 101115