CVE-2015-3237 in Hyperion Essbase

Summary

The smb_request_state function in cURL and libcurl 7.40.0 through 7.42.1 allows remote SMB servers to obtain sensitive information from memory or cause a denial of service (out-of-bounds read and crash) via crafted length and offset values.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservation

04/10/2015

Disclosure

06/22/2015

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
99995	Oracle Hyperion Essbase Security (libcurl) input validation	20	Not defined	Official fix	CVE-2015-3237
95576	Oracle Enterprise Manager Ops Center input validation	20	Not defined	Official fix	CVE-2015-3237
89914	Oracle Enterprise Manager Ops Center Networking input validation	20	Not defined	Official fix	CVE-2015-3237
89900	Oracle GlassFish Server Administration input validation	20	Not defined	Official fix	CVE-2015-3237
76044	cURL/libcURL smb_request_state input validation	20	Not defined	Not defined	CVE-2015-3237

Sources

• MITRE
• NVD
• CVE Details