---

CVE-2018-1000120 - log back

CVE-2018-1000120 created at 25 Sep 2019 19:31:40
Severity	+ Medium
Remote	+ Remote
Type	+ Denial of service
Description	+ It was found that libcurl did not safely parse FTP URLs when using the CURLOPT_FTP_FILEMETHOD method. An attacker, able to provide a specially crafted FTP URL to an application using libcurl, could write a NULL byte at an arbitrary location, resulting in a crash, or an unspecified behavior.
References	+ https://curl.haxx.se/docs/adv_2018-9cd6.html + https://curl.haxx.se/CVE-2018-1000120.patch + https://github.com/curl/curl/commit/535432c0adb62fe167ec09621500470b6fa4eb0f
Notes