Scan for free your assets for this vulnerability
It is easy and free to get started with Mageni and it can be installed in Windows, macOS and Linux.
Processing. Please wait...
No credit card necessary
Debian LTS Advisory ([SECURITY] [DLA 1804-1] curl security update)
The remote host is missing an update for the 'curl' package(s) announced via the DSA-1804-1 advisory.
cURL, an URL transfer library, contains a heap buffer overflow in the function tftp_receive_packet() that receives data from a TFTP server. It calls recvfrom() with the default size for the buffer rather than with the size that was used to allocate it. Thus, the content that might overwrite the heap memory is entirely controlled by the server.
'curl' package(s) on Debian Linux.
Checks if a vulnerable package version is present on the target host.
For Debian 8 'Jessie', this problem has been fixed in version 7.38.0-4+deb8u15. We recommend that you upgrade your curl packages.
Common Vulnerabilities and Exposures (CVE)
Know your vulnerabilities for free. Start using Mageni today.
Mageni can help you to find, assess and manage your vulnerabilities.Get Started for Free