CVE-2018-1000300: curl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer Overflow vulner...

Security readout for executives and security teams

CVE-2018-1000300 is a curl memory corruption issue affecting curl 7.54.1 through 7.59.0. A malicious or faulty FTP server could send very long command replies and trigger a heap buffer overflow when curl closes the FTP connection, causing denial of service or potentially more serious impact. Exposure is most likely where curl or libcurl in the vulnerable version range makes FTP connections, especially to untrusted or externally controlled FTP servers. Systems may also be exposed through vendor-packaged curl in operating systems or bundled third-party products referenced by vendor advisories. Treat this as a targeted remediation item, not an emergency based on the provided evidence. Prioritize internet-facing automation, file-transfer workflows, and vendor products that use vulnerable curl versions, then fold remaining systems into normal patch cycles. Mitigation focus: Upgrade curl or libcurl to 7.60.0 or later.; Apply vendor-supported fixed packages for affected distributions or products.; Reduce FTP use to trusted servers until vulnerable versions are removed..

Prepared

Jun 7, 2026, 13:21 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.