CVE-2013-0249

CVE-2013-0249 describes a stack-based buffer overflow in the Curl_sasl_create_digest_md5_message function within libcurl versions 7.26.0 to 7.28.1, affecting products like Haxx curl and Canonical Ubuntu. This vulnerability allows remote attackers to trigger a denial of service or potentially execute arbitrary code by sending a long string in the realm parameter during SASL DIGEST-MD5 authentication for POP3, SMTP, or IMAP. With a CVSS score of 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P) and a FAUCET Risk Score of 98/100, it represents a high-severity risk due to its network-based attack vector and low attack complexity. While not listed in CISA's KEV catalog or currently active on hot lists, a Proof-of-Concept exploit (EDB-24487) is publicly available, though there is minimal community discussion or media coverage surrounding this CVE.