CVE-2018-14618

CVE-2018-14618 describes a critical heap buffer overflow vulnerability in curl versions prior to 7.61.1, specifically within its NTLM authentication code, affecting products like Canonical, Debian, Haxx, and Red Hat. This flaw arises from an integer overflow when calculating buffer size for NTLM password hashing on 32-bit systems, leading to a small buffer allocation and subsequent overflow. With a CVSS score of 9.8 (CRITICAL), it presents a severe risk due to its network-based attack vector, low attack complexity, and high potential for confidentiality, integrity, and availability impacts. Despite its severity, there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.