CVE-2018-1000300

curl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer Overflow vulnerability in denial of service and more that can result in curl might overflow a heap based memory buffer when closing down an FTP connection with very long server command replies.. This vulnerability appears to have been fixed in curl < 7.54.1 and curl >= 7.60.0.

• CWE-787

• http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.htmlPatch
• http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.htmlPatch
• http://www.securityfocus.com/bid/104207Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040933Third Party Advisory, VDB Entry
• https://curl.haxx.se/docs/adv_2018-82c2.htmlPatch, Vendor Advisory
• https://security.gentoo.org/glsa/201806-05Third Party Advisory
• https://usn.ubuntu.com/3648-1/Third Party Advisory
• https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.htmlPatch
• http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.htmlPatch
• http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.htmlPatch
• http://www.securityfocus.com/bid/104207Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040933Third Party Advisory, VDB Entry
• https://curl.haxx.se/docs/adv_2018-82c2.htmlPatch, Vendor Advisory
• https://security.gentoo.org/glsa/201806-05Third Party Advisory
• https://usn.ubuntu.com/3648-1/Third Party Advisory
• https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.htmlPatch

Published

May 24, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-1000221pkgconf version 1.5.0 to 1.5.2 contains a Buffer Overflow vu…
• CVE-2018-1000222Libgd version 2.2.5 contains a Double Free Vulnerability vul…
• CVE-2018-1000223soundtouch version up to and including 2.0.0 contains a Buff…
• CVE-2018-1000224Godot Engine version All versions prior to 2.1.5, all 3.0 ve…
• CVE-2018-1000225Cobbler version Verified as present in Cobbler versions 2.6.…
• CVE-2018-1000226Cobbler version Verified as present in Cobbler versions 2.6.…
• CVE-2018-1000301curl version curl 7.20.0 to and including curl 7.59.0 contai…9.1
• CVE-2018-1000400Kubernetes CRI-O version prior to 1.9 contains a Privilege C…
• CVE-2018-1000401Jenkins project Jenkins AWS CodePipeline Plugin version 0.36…
• CVE-2018-1000402Jenkins project Jenkins AWS CodeDeploy Plugin version 1.19 a…
• CVE-2018-1000403Jenkins project Jenkins AWS CodeDeploy Plugin version 1.19 a…
• CVE-2018-1000404Jenkins project Jenkins AWS CodeBuild Plugin version 0.26 an…