New! Vulnerability Priority Rating (VPR)
Tenable calculates a dynamic VPR for every vulnerability. VPR combines vulnerability information with threat intelligence and machine learning algorithms to predict which vulnerabilities are most likely to be exploited in attacks. Read more about what VPR is and how it's different from CVSS.
VPR Score: 5.9
Synopsis
The remote device is missing a vendor-supplied security patch.
Description
The base64 encode function in curl before version 7.51.0 is prone to a buffer being under allocated in 32bit systems if it receives at least 1Gb as input via `CURLOPT_USERNAME`. (CVE-2016-8617)
Impact
This vulnerability may allow an attacker to overwrite memory behind the output buffer.
Solution
Upgrade to one of the non-vulnerable versions listed in the F5 Solution K44503763.