Multiple vulnerabilities have been found in cURL, the worst of which could result in a Denial of Service condition.

Affected Packages
Package net-misc/curl on all architectures
Affected versions < 7.59.0
Unaffected versions >= 7.59.0

Background

A command line tool and library for transferring data with URLs.

Description

Multiple vulnerabilities have been discovered in cURL. Please review the CVE identifiers referenced below for details.

Impact

Remote attackers could cause a Denial of Service condition, obtain sensitive information, or have other unspecified impacts.

References

CVE-2018-1000005
CVE-2018-1000007
CVE-2018-1000120
CVE-2018-1000121
CVE-2018-1000122