Security Advisory

CVE-2015-3237

6.4

Vulnerability Description

The smb_request_state function in cURL and libcurl 7.40.0 through 7.42.1 allows remote SMB servers to obtain sensitive information from memory or cause a denial of service (out-of-bounds read and crash) via crafted length and offset values.
Published Date June 22, 2015
Official Source NIST NVD Advisory