cURL vulnerability CVE-2013-0249

[lorio]

This vulnerability can be used for remote code execution (RCE) on vulnerable systems.

cURL - Security Advisory (SASL buffer overflow)

CVE-2013-0249

Affected versions: curl 7.26.0 to and including 7.28.1
Not affected versions: curl < 7.26.0 and >= 7.29.0

 

[niceboy]

Hi lorio,

Is the current cpanel stable version is affected by this threat?

 

[nospa]

According to EasyApache changelog we are safe because cPanel provides 7.24.0 cURL version.