Поиск уязвимостей
Количество 8
Количество 8
CVE-2016-3739
The (1) mbed_connect_step1 function in lib/vtls/mbedtls.c and (2) polarssl_connect_step1 function in lib/vtls/polarssl.c in cURL and libcurl before 7.49.0, when using SSLv3 or making a TLS connection to a URL that uses a numerical IP address, allow remote attackers to spoof servers via an arbitrary valid certificate.
CVE-2016-3739
The (1) mbed_connect_step1 function in lib/vtls/mbedtls.c and (2) polarssl_connect_step1 function in lib/vtls/polarssl.c in cURL and libcurl before 7.49.0, when using SSLv3 or making a TLS connection to a URL that uses a numerical IP address, allow remote attackers to spoof servers via an arbitrary valid certificate.
CVE-2016-3739
The (1) mbed_connect_step1 function in lib/vtls/mbedtls.c and (2) polarssl_connect_step1 function in lib/vtls/polarssl.c in cURL and libcurl before 7.49.0, when using SSLv3 or making a TLS connection to a URL that uses a numerical IP address, allow remote attackers to spoof servers via an arbitrary valid certificate.
CVE-2016-3739
The (1) mbed_connect_step1 function in lib/vtls/mbedtls.c and (2) pola ...
GHSA-4rcg-2r46-4hcc
The (1) mbed_connect_step1 function in lib/vtls/mbedtls.c and (2) polarssl_connect_step1 function in lib/vtls/polarssl.c in cURL and libcurl before 7.49.0, when using SSLv3 or making a TLS connection to a URL that uses a numerical IP address, allow remote attackers to spoof servers via an arbitrary valid certificate.
ALT-PU-2016-1536
ALT-PU-2016-1536: package `curl` update to version 7.49.0-alt1
ALT-PU-2014-1748
ALT-PU-2014-1748: package `curl` update to version 7.37.0-alt1
ALT-PU-2016-1225
ALT-PU-2016-1225: package `curl` update to version 7.47.1-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2016-3739 The (1) mbed_connect_step1 function in lib/vtls/mbedtls.c and (2) polarssl_connect_step1 function in lib/vtls/polarssl.c in cURL and libcurl before 7.49.0, when using SSLv3 or making a TLS connection to a URL that uses a numerical IP address, allow remote attackers to spoof servers via an arbitrary valid certificate. | CVSS3: 5.3 | 7% Низкий | больше 10 лет назад |
 | CVE-2016-3739 The (1) mbed_connect_step1 function in lib/vtls/mbedtls.c and (2) polarssl_connect_step1 function in lib/vtls/polarssl.c in cURL and libcurl before 7.49.0, when using SSLv3 or making a TLS connection to a URL that uses a numerical IP address, allow remote attackers to spoof servers via an arbitrary valid certificate. | CVSS2: 4 | 7% Низкий | больше 10 лет назад |
 | CVE-2016-3739 The (1) mbed_connect_step1 function in lib/vtls/mbedtls.c and (2) polarssl_connect_step1 function in lib/vtls/polarssl.c in cURL and libcurl before 7.49.0, when using SSLv3 or making a TLS connection to a URL that uses a numerical IP address, allow remote attackers to spoof servers via an arbitrary valid certificate. | CVSS3: 5.3 | 7% Низкий | больше 10 лет назад |
| CVE-2016-3739 The (1) mbed_connect_step1 function in lib/vtls/mbedtls.c and (2) pola ... | CVSS3: 5.3 | 7% Низкий | больше 10 лет назад |
| GHSA-4rcg-2r46-4hcc The (1) mbed_connect_step1 function in lib/vtls/mbedtls.c and (2) polarssl_connect_step1 function in lib/vtls/polarssl.c in cURL and libcurl before 7.49.0, when using SSLv3 or making a TLS connection to a URL that uses a numerical IP address, allow remote attackers to spoof servers via an arbitrary valid certificate. | CVSS3: 5.3 | 7% Низкий | больше 4 лет назад |
| ALT-PU-2016-1536 ALT-PU-2016-1536: package `curl` update to version 7.49.0-alt1 | CVSS3: 5.3 | 7% Низкий | больше 10 лет назад |
| ALT-PU-2014-1748 ALT-PU-2014-1748: package `curl` update to version 7.37.0-alt1 | CVSS3: 5.3 | больше 12 лет назад | |
| ALT-PU-2016-1225 ALT-PU-2016-1225: package `curl` update to version 7.47.1-alt1 | CVSS3: 7.3 | больше 10 лет назад |
Уязвимостей на страницу