SecuritySpace - CVE-2018-16840

Vulnerability Search		Search 324607 CVE descriptions and 146377 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2018-16840

Description: A heap use-after-free flaw was found in curl versions from 7.59.0 through 7.61.1 in the code related to closing an easy handle. When closing and cleaning up an 'easy' handle in the `Curl_close()` function, the library code first frees a struct (without nulling the pointer) and might then subsequently erroneously write to a struct field within that already freed struct.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2018-16840
https://security.gentoo.org/glsa/201903-03
https://curl.haxx.se/docs/CVE-2018-16840.html
http://www.securitytracker.com/id/1042013
https://usn.ubuntu.com/3805-1/

CVE ID:	CVE-2018-16840
Description:	A heap use-after-free flaw was found in curl versions from 7.59.0 through 7.61.1 in the code related to closing an easy handle. When closing and cleaning up an 'easy' handle in the `Curl_close()` function, the library code first frees a struct (without nulling the pointer) and might then subsequently erroneously write to a struct field within that already freed struct.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2018-16840 https://security.gentoo.org/glsa/201903-03 https://curl.haxx.se/docs/CVE-2018-16840.html http://www.securitytracker.com/id/1042013 https://usn.ubuntu.com/3805-1/