CVE-2013-0249Curl Memory Corruption
Stack-based buffer overflow in the Curl_sasl_create_digest_md5_message function in lib/curl_sasl.c in curl and libcurl 7.26.0 through 7.28.1, when negotiating SASL DIGEST-MD5 authentication, allows remote attackers to cause a denial of service (crash) and possibly execute…
Published Mar 8, 2013 · Updated Aug 4, 2026 · Also known as DEBIAN-CVE-2013-0249
Key Facts
Patch immediately- CVE-2013-0249 is a high-severity vulnerability (CVSS 7.5 v2) affecting Curl (Haxx), Libcurl (Haxx), Ubuntu Linux (Canonical) and 5 more products.
- It is not listed in any known-exploited vulnerabilities catalog. Public exploit code is available.
- EPSS estimates a 22% probability of exploitation in the next 30 days.
- Fixed versions are available, including Curl 7.29.0-1, Curl 7.51.0-1.1, libcurl-devel 7.51.0-1.1.
- Brandefense priority: patch immediately, because public exploit code exists for a high-severity flaw.
Scores
CVSS v2
7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS (30-day exploit likelihood)
22%
Higher than 97.6% of all scored CVEs
Exploit maturity
Proof of concept
ATLAS score
42/100
Publication score, see How it works
Exploitation Verdict
KEV listed
Not listed
Federal due date
None
No federal due date
Ransomware use
Not reported
Attributed actors
None named
Exploit & Defence Guidance
Exploit maturity
Proof of concept
Public exploit code
2
Proof-of-concept links
In-the-wild evidence
0
Reports of active use
Advisories And Exploit References
Description
Stack-based buffer overflow in the Curl_sasl_create_digest_md5_message function in lib/curl_sasl.c in curl and libcurl 7.26.0 through 7.28.1, when negotiating SASL DIGEST-MD5 authentication, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the realm parameter in a (1) POP3, (2) SMTP or (3) IMAP message.
Affected Products
28 affected entries in total| Product | Affected versions | Fixed in |
|---|---|---|
| CurlHaxx | 7.26.0, 7.27.0, 7.28.0, 7.28.1 | 7.29.0-1 |
| LibcurlHaxx | 7.26.0, 7.27.0, 7.28.0, 7.28.1 | n/a |
| Ubuntu LinuxCanonical | 12.10 | n/a |
| rootio-curlrootio | See advisory | 7.29.0-1 |
| libcurl4-32bitsuse | See advisory | 7.51.0-1.1 |
Patched Releases
Curl
7.29.0-1, 7.51.0-1.1
libcurl-devel
7.51.0-1.1
libcurl-devel-32bit
7.51.0-1.1
libcurl4
7.51.0-1.1
libcurl4-32bit
7.51.0-1.1
rootio-curl
7.29.0-1
Timeline
Publicly disclosed
Mar 8, 2013
Last updated
Aug 4, 2026
Weakness Type
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
- CWE-121 Stack-based Buffer Overflow
References
- advisorysecurity-tracker.debian.org · CVE-2013-0249
- advisorycurl.haxx.se · adv_20130206.html
- advisoryUSN-1721-1
- exploitExploitDB-24487
- exploit24487
FAQ
Common Questions.
Stack-based buffer overflow in the Curl_sasl_create_digest_md5_message function in lib/curl_sasl.c in curl and libcurl 7.26.0 through 7.28.1, when negotiating SASL DIGEST-MD5 authentication, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the realm…
Affected: Curl (Haxx) versions 7.26.0, 7.27.0, 7.28.0, 7.28.1; Libcurl (Haxx) versions 7.26.0, 7.27.0, 7.28.0, 7.28.1; Ubuntu Linux (Canonical) versions 12.10, among others. The full list is in the CVE brief.
It is not listed in any known-exploited vulnerabilities catalog.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
Public exploit code is available.
Fixed versions are available, including Curl 7.29.0-1, Curl 7.51.0-1.1, libcurl-devel 7.51.0-1.1.
Brandefense priority: patch immediately, because public exploit code exists for a high-severity flaw.
Is CVE-2013-0249 On Your Attack Surface?
Brandefense matches it against the products discovered on your perimeter and opens a finding the day a CVE like this is listed.
Request A Demo