CVE-2018-16839

Name of the Vulnerable Software and Affected Versions Curl versions 7.33.0 through 7.61.1

Description The issue is related to a buffer overrun in the SASL authentication code, which may lead to denial of service. This buffer overrun is located in the Curl auth create plain message function and occurs in the heap. Exploitation of this issue may allow a remote attacker to cause a denial of service.

Recommendations For Curl versions 7.33.0 through 7.61.1, update to a version that contains a fix for this issue to prevent potential denial of service attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.