3.1

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2024-6874

CVE-2024-6874: libcurl's URL API function [curl_url_get()](https://curl.se/libcurl/c/curl_url_get.html) offers...

libcurl's URL API function curl_url_get() offers punycode conversions, to and from IDN. Asking to convert a name that is exactly 256 bytes, libcurl ends up reading outside of a stack based buffer when built to use the macidn IDN backend. The conversion function then fills up the provided buffer exactly - but does not null terminate the string.

This flaw can lead to stack contents accidently getting returned as part of the converted string.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2024-6874

CVE-2024-6874:

3.1

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability CVE-2024-6874 occurs when libcurl, built with the macidn backend, processes an IDN name that converts to exactly 256 bytes. The introducing commit add22feeef07858307be57 added two functions, mac_idn_to_ascii and mac_ascii_to_idn, in lib/idn.c. Both functions use a 256-byte stack buffer (char buffer[256]). They call uidna_nameToASCII_UTF8 and uidna_nameToUnicodeUTF8 respectively, passing sizeof(buffer) (which is 256) as the buffer length. If the conversion results in exactly 256 bytes, the buffer is filled without a null terminator. The subsequent strdup(buffer) then reads this non-null-terminated buffer, potentially including adjacent data from the stack. The fixing commit 686d54baf1df6e0775 changes the length argument to sizeof(buffer) - 1, ensuring space for null termination. Therefore, mac_idn_to_ascii and mac_ascii_to_idn are the functions directly responsible for the vulnerable buffer handling.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.