CVE-2017-1000100

CVE-2017-1000100 describes a heap-based buffer overflow vulnerability in haxx libcurl when handling TFTP transfers with overly long filenames. This flaw allows a malicious HTTP(S) server to redirect a vulnerable client to a crafted TFTP URL, potentially leading to the disclosure of private memory contents to a remote server. The vulnerability has a CVSS v3.0 score of 6.5 (Medium), indicating a network-based attack with low complexity, requiring user interaction, and resulting in high confidentiality impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.