Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Oracle HTTP Server Out-of-bounds Read Vulnerability - CVE-2019-3823 - Vulnerability Database
Oracle HTTP Server

Oracle HTTP Server Out-of-bounds Read Vulnerability - CVE-2019-3823

High
Reference: CVE-2019-3823
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2019-3823
Title: Oracle HTTP Server Out-of-bounds Read Vulnerability
Overview:

libcurl versions from 7.34.0 to before 7.64.0 are vulnerable to a heap out-of-bounds read in the code handling the end-of-response for SMTP. If the buffer passed to smtp_endofresp() isn39t NUL terminated and contains no character ending the parsed number and len is set to 5 then the strtol() call reads beyond the allocated buffer. The read contents will not be returned to the caller.