Поиск уязвимостей
Количество 18
Количество 18
ALT-PU-2016-1225
ALT-PU-2016-1225: package `curl` update to version 7.47.1-alt1
CVE-2016-3739
The (1) mbed_connect_step1 function in lib/vtls/mbedtls.c and (2) polarssl_connect_step1 function in lib/vtls/polarssl.c in cURL and libcurl before 7.49.0, when using SSLv3 or making a TLS connection to a URL that uses a numerical IP address, allow remote attackers to spoof servers via an arbitrary valid certificate.
CVE-2016-3739
The (1) mbed_connect_step1 function in lib/vtls/mbedtls.c and (2) polarssl_connect_step1 function in lib/vtls/polarssl.c in cURL and libcurl before 7.49.0, when using SSLv3 or making a TLS connection to a URL that uses a numerical IP address, allow remote attackers to spoof servers via an arbitrary valid certificate.
CVE-2016-3739
The (1) mbed_connect_step1 function in lib/vtls/mbedtls.c and (2) polarssl_connect_step1 function in lib/vtls/polarssl.c in cURL and libcurl before 7.49.0, when using SSLv3 or making a TLS connection to a URL that uses a numerical IP address, allow remote attackers to spoof servers via an arbitrary valid certificate.
CVE-2016-3739
The (1) mbed_connect_step1 function in lib/vtls/mbedtls.c and (2) pola ...
CVE-2016-0755
The ConnectionExists function in lib/url.c in libcurl before 7.47.0 does not properly re-use NTLM-authenticated proxy connections, which might allow remote attackers to authenticate as other users via a request, a similar issue to CVE-2014-0015.
CVE-2016-0755
The ConnectionExists function in lib/url.c in libcurl before 7.47.0 does not properly re-use NTLM-authenticated proxy connections, which might allow remote attackers to authenticate as other users via a request, a similar issue to CVE-2014-0015.
CVE-2016-0755
The ConnectionExists function in lib/url.c in libcurl before 7.47.0 does not properly re-use NTLM-authenticated proxy connections, which might allow remote attackers to authenticate as other users via a request, a similar issue to CVE-2014-0015.
CVE-2016-0755
The ConnectionExists function in lib/url.c in libcurl before 7.47.0 do ...
GHSA-4rcg-2r46-4hcc
The (1) mbed_connect_step1 function in lib/vtls/mbedtls.c and (2) polarssl_connect_step1 function in lib/vtls/polarssl.c in cURL and libcurl before 7.49.0, when using SSLv3 or making a TLS connection to a URL that uses a numerical IP address, allow remote attackers to spoof servers via an arbitrary valid certificate.
ALT-PU-2016-1536
ALT-PU-2016-1536: package `curl` update to version 7.49.0-alt1
openSUSE-SU-2016:0360-1
Security update for curl
SUSE-SU-2016:0347-1
Security update for curl
SUSE-SU-2016:0340-1
Security update for curl
GHSA-ff7q-9j5g-56pg
The ConnectionExists function in lib/url.c in libcurl before 7.47.0 does not properly re-use NTLM-authenticated proxy connections, which might allow remote attackers to authenticate as other users via a request, a similar issue to CVE-2014-0015.
BDU:2016-01656
Уязвимость библиотеки cURL, позволяющая нарушителю пройти аутентификацию от имени другого пользователя
ALT-PU-2014-1748
ALT-PU-2014-1748: package `curl` update to version 7.37.0-alt1
SUSE-SU-2016:0778-1
Security update for sles11sp4-docker-image
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2016-1225 ALT-PU-2016-1225: package `curl` update to version 7.47.1-alt1 | CVSS3: 7.3 | больше 10 лет назад | |
 | CVE-2016-3739 The (1) mbed_connect_step1 function in lib/vtls/mbedtls.c and (2) polarssl_connect_step1 function in lib/vtls/polarssl.c in cURL and libcurl before 7.49.0, when using SSLv3 or making a TLS connection to a URL that uses a numerical IP address, allow remote attackers to spoof servers via an arbitrary valid certificate. | CVSS3: 5.3 | 7% Низкий | больше 10 лет назад |
 | CVE-2016-3739 The (1) mbed_connect_step1 function in lib/vtls/mbedtls.c and (2) polarssl_connect_step1 function in lib/vtls/polarssl.c in cURL and libcurl before 7.49.0, when using SSLv3 or making a TLS connection to a URL that uses a numerical IP address, allow remote attackers to spoof servers via an arbitrary valid certificate. | CVSS2: 4 | 7% Низкий | больше 10 лет назад |
 | CVE-2016-3739 The (1) mbed_connect_step1 function in lib/vtls/mbedtls.c and (2) polarssl_connect_step1 function in lib/vtls/polarssl.c in cURL and libcurl before 7.49.0, when using SSLv3 or making a TLS connection to a URL that uses a numerical IP address, allow remote attackers to spoof servers via an arbitrary valid certificate. | CVSS3: 5.3 | 7% Низкий | больше 10 лет назад |
| CVE-2016-3739 The (1) mbed_connect_step1 function in lib/vtls/mbedtls.c and (2) pola ... | CVSS3: 5.3 | 7% Низкий | больше 10 лет назад |
| CVE-2016-0755 The ConnectionExists function in lib/url.c in libcurl before 7.47.0 does not properly re-use NTLM-authenticated proxy connections, which might allow remote attackers to authenticate as other users via a request, a similar issue to CVE-2014-0015. | CVSS3: 7.3 | 9% Низкий | почти 11 лет назад |
| CVE-2016-0755 The ConnectionExists function in lib/url.c in libcurl before 7.47.0 does not properly re-use NTLM-authenticated proxy connections, which might allow remote attackers to authenticate as other users via a request, a similar issue to CVE-2014-0015. | CVSS2: 4 | 9% Низкий | почти 11 лет назад |
| CVE-2016-0755 The ConnectionExists function in lib/url.c in libcurl before 7.47.0 does not properly re-use NTLM-authenticated proxy connections, which might allow remote attackers to authenticate as other users via a request, a similar issue to CVE-2014-0015. | CVSS3: 7.3 | 9% Низкий | почти 11 лет назад |
| CVE-2016-0755 The ConnectionExists function in lib/url.c in libcurl before 7.47.0 do ... | CVSS3: 7.3 | 9% Низкий | почти 11 лет назад |
| GHSA-4rcg-2r46-4hcc The (1) mbed_connect_step1 function in lib/vtls/mbedtls.c and (2) polarssl_connect_step1 function in lib/vtls/polarssl.c in cURL and libcurl before 7.49.0, when using SSLv3 or making a TLS connection to a URL that uses a numerical IP address, allow remote attackers to spoof servers via an arbitrary valid certificate. | CVSS3: 5.3 | 7% Низкий | больше 4 лет назад |
| ALT-PU-2016-1536 ALT-PU-2016-1536: package `curl` update to version 7.49.0-alt1 | CVSS3: 5.3 | 7% Низкий | больше 10 лет назад |
 | openSUSE-SU-2016:0360-1 Security update for curl | 9% Низкий | почти 11 лет назад | |
| SUSE-SU-2016:0347-1 Security update for curl | 9% Низкий | почти 11 лет назад | |
| SUSE-SU-2016:0340-1 Security update for curl | 9% Низкий | почти 11 лет назад | |
| GHSA-ff7q-9j5g-56pg The ConnectionExists function in lib/url.c in libcurl before 7.47.0 does not properly re-use NTLM-authenticated proxy connections, which might allow remote attackers to authenticate as other users via a request, a similar issue to CVE-2014-0015. | CVSS3: 7.3 | 9% Низкий | больше 4 лет назад |
 | BDU:2016-01656 Уязвимость библиотеки cURL, позволяющая нарушителю пройти аутентификацию от имени другого пользователя | CVSS2: 5 | 9% Низкий | почти 11 лет назад |
| ALT-PU-2014-1748 ALT-PU-2014-1748: package `curl` update to version 7.37.0-alt1 | CVSS3: 5.3 | больше 12 лет назад | |
| SUSE-SU-2016:0778-1 Security update for sles11sp4-docker-image | больше 10 лет назад |
Уязвимостей на страницу