CVE-2017-1000257 — An IMAP FETCH response line indicates the size of the returned data, in number of bytes. When that response says the data is zero bytes, libcurl would pass on that (non-existing) data with a pointer a — CVE Database · The Intelligence Room