CVE-2016-4606 Curl before 7.49.1 in Apple OS X before macOS Sierra prior to 10.12 allows remote or local attackers to execute arbitrary code, gain sensitive information, cause denial-of-service conditions, bypass s...
CriticalCVSS 9.8
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Curl before 7.49.1 in Apple OS X before macOS Sierra prior to 10.12 allows remote or local attackers to execute arbitrary code, gain sensitive information, cause denial-of-service conditions, bypass security restrictions, and perform unauthorized actions. This may aid in other attacks.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| haxx curl | < 7.49.1 | 7.49.1 |
References
- www.securityfocus.com third-party-advisory vdb-entry
- www.securitytracker.com third-party-advisory vdb-entry
- lists.apple.com mailing-list third-party-advisory
- Debian Security Tracker CVE-2016-4606 vendor-advisory