CVE-2015-3144

Name of the Vulnerable Software and Affected Versions cURL and libcurl versions 7.37.0 through 7.41.0

Description The issue arises from the fix hostname() function, which fails to properly handle a zero-length host name in a URL, such as "http://:80" or ":80". This can lead to an out-of-bounds read or write and cause a denial of service (crash). The function incorrectly indexes the hostname pointer with a -1 offset when encountering a zero-length hostname, potentially resulting in a crash or other unspecified impacts.

Recommendations For cURL and libcurl versions 7.37.0 through 7.41.0, consider avoiding the use of URLs with zero-length hostnames until a patch is available. As a temporary workaround, restrict the input to the fix hostname() function to prevent zero-length hostnames from being processed.