cvedb.io
CVE-2017-8816
CRITICAL · CVSS 9.8
EPSS exploitation probability: 0%
Published 2017-11-29T18:29:00.300 · Last modified 2026-06-17T01:27:00.713

Summary

The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denial of service (integer overflow and resultant buffer overflow, and application crash) or possibly have unspecified other impact via vectors involving long user and password fields.

Affected products

haxx — curl

Does this affect you?

Add your gear to cvedb and we'll alert you only when haxx ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.