Поиск уязвимостей
Количество 19
Количество 19
ALT-PU-2014-1748
ALT-PU-2014-1748: package `curl` update to version 7.37.0-alt1
CVE-2016-3739
The (1) mbed_connect_step1 function in lib/vtls/mbedtls.c and (2) polarssl_connect_step1 function in lib/vtls/polarssl.c in cURL and libcurl before 7.49.0, when using SSLv3 or making a TLS connection to a URL that uses a numerical IP address, allow remote attackers to spoof servers via an arbitrary valid certificate.
CVE-2016-3739
The (1) mbed_connect_step1 function in lib/vtls/mbedtls.c and (2) polarssl_connect_step1 function in lib/vtls/polarssl.c in cURL and libcurl before 7.49.0, when using SSLv3 or making a TLS connection to a URL that uses a numerical IP address, allow remote attackers to spoof servers via an arbitrary valid certificate.
CVE-2016-3739
The (1) mbed_connect_step1 function in lib/vtls/mbedtls.c and (2) polarssl_connect_step1 function in lib/vtls/polarssl.c in cURL and libcurl before 7.49.0, when using SSLv3 or making a TLS connection to a URL that uses a numerical IP address, allow remote attackers to spoof servers via an arbitrary valid certificate.
CVE-2016-3739
The (1) mbed_connect_step1 function in lib/vtls/mbedtls.c and (2) pola ...
CVE-2015-3143
cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows remote attackers to connect as other users via an unauthenticated request, a similar issue to CVE-2014-0015.
CVE-2015-3143
cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows remote attackers to connect as other users via an unauthenticated request, a similar issue to CVE-2014-0015.
CVE-2015-3143
cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows remote attackers to connect as other users via an unauthenticated request, a similar issue to CVE-2014-0015.
CVE-2015-3143
cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM c ...
GHSA-4rcg-2r46-4hcc
The (1) mbed_connect_step1 function in lib/vtls/mbedtls.c and (2) polarssl_connect_step1 function in lib/vtls/polarssl.c in cURL and libcurl before 7.49.0, when using SSLv3 or making a TLS connection to a URL that uses a numerical IP address, allow remote attackers to spoof servers via an arbitrary valid certificate.
ALT-PU-2016-1536
ALT-PU-2016-1536: package `curl` update to version 7.49.0-alt1
GHSA-6mxf-77w3-cj5m
cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows remote attackers to connect as other users via an unauthenticated request, a similar issue to CVE-2014-0015.
ALT-PU-2016-1225
ALT-PU-2016-1225: package `curl` update to version 7.47.1-alt1
ALT-PU-2015-1396
ALT-PU-2015-1396: package `curl` update to version 7.42.0-alt1
SUSE-SU-2015:0990-1
Security update for curl
ELSA-2015-2159
ELSA-2015-2159: curl security, bug fix, and enhancement update (MODERATE)
ELSA-2015-1254
ELSA-2015-1254: curl security, bug fix, and enhancement update (MODERATE)
SUSE-SU-2015:0962-1
Security update for curl
ALT-PU-2014-2327
ALT-PU-2014-2327: package `curl` update to version 7.39.0-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2014-1748 ALT-PU-2014-1748: package `curl` update to version 7.37.0-alt1 | CVSS3: 5.3 | больше 12 лет назад | |
 | CVE-2016-3739 The (1) mbed_connect_step1 function in lib/vtls/mbedtls.c and (2) polarssl_connect_step1 function in lib/vtls/polarssl.c in cURL and libcurl before 7.49.0, when using SSLv3 or making a TLS connection to a URL that uses a numerical IP address, allow remote attackers to spoof servers via an arbitrary valid certificate. | CVSS3: 5.3 | 7% Низкий | больше 10 лет назад |
 | CVE-2016-3739 The (1) mbed_connect_step1 function in lib/vtls/mbedtls.c and (2) polarssl_connect_step1 function in lib/vtls/polarssl.c in cURL and libcurl before 7.49.0, when using SSLv3 or making a TLS connection to a URL that uses a numerical IP address, allow remote attackers to spoof servers via an arbitrary valid certificate. | CVSS2: 4 | 7% Низкий | больше 10 лет назад |
 | CVE-2016-3739 The (1) mbed_connect_step1 function in lib/vtls/mbedtls.c and (2) polarssl_connect_step1 function in lib/vtls/polarssl.c in cURL and libcurl before 7.49.0, when using SSLv3 or making a TLS connection to a URL that uses a numerical IP address, allow remote attackers to spoof servers via an arbitrary valid certificate. | CVSS3: 5.3 | 7% Низкий | больше 10 лет назад |
| CVE-2016-3739 The (1) mbed_connect_step1 function in lib/vtls/mbedtls.c and (2) pola ... | CVSS3: 5.3 | 7% Низкий | больше 10 лет назад |
| CVE-2015-3143 cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows remote attackers to connect as other users via an unauthenticated request, a similar issue to CVE-2014-0015. | CVSS2: 5 | 11% Средний | больше 11 лет назад |
| CVE-2015-3143 cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows remote attackers to connect as other users via an unauthenticated request, a similar issue to CVE-2014-0015. | CVSS2: 4 | 11% Средний | больше 11 лет назад |
| CVE-2015-3143 cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows remote attackers to connect as other users via an unauthenticated request, a similar issue to CVE-2014-0015. | CVSS2: 5 | 11% Средний | больше 11 лет назад |
| CVE-2015-3143 cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM c ... | CVSS2: 5 | 11% Средний | больше 11 лет назад |
| GHSA-4rcg-2r46-4hcc The (1) mbed_connect_step1 function in lib/vtls/mbedtls.c and (2) polarssl_connect_step1 function in lib/vtls/polarssl.c in cURL and libcurl before 7.49.0, when using SSLv3 or making a TLS connection to a URL that uses a numerical IP address, allow remote attackers to spoof servers via an arbitrary valid certificate. | CVSS3: 5.3 | 7% Низкий | больше 4 лет назад |
| ALT-PU-2016-1536 ALT-PU-2016-1536: package `curl` update to version 7.49.0-alt1 | CVSS3: 5.3 | 7% Низкий | больше 10 лет назад |
| GHSA-6mxf-77w3-cj5m cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows remote attackers to connect as other users via an unauthenticated request, a similar issue to CVE-2014-0015. | 11% Средний | больше 4 лет назад | |
| ALT-PU-2016-1225 ALT-PU-2016-1225: package `curl` update to version 7.47.1-alt1 | CVSS3: 7.3 | больше 10 лет назад | |
| ALT-PU-2015-1396 ALT-PU-2015-1396: package `curl` update to version 7.42.0-alt1 | CVSS2: 9 | больше 11 лет назад | |
 | SUSE-SU-2015:0990-1 Security update for curl | больше 11 лет назад | ||
| ELSA-2015-2159 ELSA-2015-2159: curl security, bug fix, and enhancement update (MODERATE) | почти 11 лет назад | ||
| ELSA-2015-1254 ELSA-2015-1254: curl security, bug fix, and enhancement update (MODERATE) | больше 11 лет назад | ||
| SUSE-SU-2015:0962-1 Security update for curl | больше 12 лет назад | ||
| ALT-PU-2014-2327 ALT-PU-2014-2327: package `curl` update to version 7.39.0-alt1 | CVSS3: 7.5 | около 12 лет назад |
Уязвимостей на страницу