Поиск уязвимостей
Количество 26
Количество 26
SUSE-SU-2016:2449-1
Security update for curl
ELSA-2016-2575
ELSA-2016-2575: curl security, bug fix, and enhancement update (MODERATE)
openSUSE-SU-2016:2379-1
Security update for curl
SUSE-SU-2016:2330-1
Security update for curl
ALT-PU-2016-1895
ALT-PU-2016-1895: package `curl` update to version 7.50.1-alt1
CVE-2016-7141
curl and libcurl before 7.50.2, when built with NSS and the libnsspem.so library is available at runtime, allow remote attackers to hijack the authentication of a TLS connection by leveraging reuse of a previously loaded client certificate from file for a connection for which no certificate has been set, a different vulnerability than CVE-2016-5420.
CVE-2016-7141
curl and libcurl before 7.50.2, when built with NSS and the libnsspem.so library is available at runtime, allow remote attackers to hijack the authentication of a TLS connection by leveraging reuse of a previously loaded client certificate from file for a connection for which no certificate has been set, a different vulnerability than CVE-2016-5420.
CVE-2016-7141
curl and libcurl before 7.50.2, when built with NSS and the libnsspem.so library is available at runtime, allow remote attackers to hijack the authentication of a TLS connection by leveraging reuse of a previously loaded client certificate from file for a connection for which no certificate has been set, a different vulnerability than CVE-2016-5420.
CVE-2016-7141
curl and libcurl before 7.50.2, when built with NSS and the libnsspem. ...
GHSA-vx32-35rm-8jq5
curl and libcurl before 7.50.2, when built with NSS and the libnsspem.so library is available at runtime, allow remote attackers to hijack the authentication of a TLS connection by leveraging reuse of a previously loaded client certificate from file for a connection for which no certificate has been set, a different vulnerability than CVE-2016-5420.
ALT-PU-2016-1956
ALT-PU-2016-1956: package `curl` update to version 7.50.2-alt1
SUSE-SU-2018:0230-1
Security update for curl
CVE-2016-5420
curl and libcurl before 7.50.1 do not check the client certificate when choosing the TLS connection to reuse, which might allow remote attackers to hijack the authentication of the connection by leveraging a previously created connection with a different client certificate.
CVE-2016-5420
curl and libcurl before 7.50.1 do not check the client certificate when choosing the TLS connection to reuse, which might allow remote attackers to hijack the authentication of the connection by leveraging a previously created connection with a different client certificate.
CVE-2016-5420
curl and libcurl before 7.50.1 do not check the client certificate when choosing the TLS connection to reuse, which might allow remote attackers to hijack the authentication of the connection by leveraging a previously created connection with a different client certificate.
CVE-2016-5420
curl and libcurl before 7.50.1 do not check the client certificate whe ...
SUSE-SU-2017:2699-1
Security update for SLES 12 Docker image
SUSE-SU-2017:2700-1
Security update for SLES 12-SP1 Docker image
CVE-2016-5419
curl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate has changed, which allows remote attackers to bypass intended restrictions by resuming a session.
CVE-2016-5419
curl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate has changed, which allows remote attackers to bypass intended restrictions by resuming a session.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | SUSE-SU-2016:2449-1 Security update for curl | около 10 лет назад | ||
| ELSA-2016-2575 ELSA-2016-2575: curl security, bug fix, and enhancement update (MODERATE) | около 10 лет назад | ||
| openSUSE-SU-2016:2379-1 Security update for curl | около 10 лет назад | ||
| SUSE-SU-2016:2330-1 Security update for curl | около 10 лет назад | ||
| ALT-PU-2016-1895 ALT-PU-2016-1895: package `curl` update to version 7.50.1-alt1 | CVSS3: 8.1 | около 10 лет назад | |
 | CVE-2016-7141 curl and libcurl before 7.50.2, when built with NSS and the libnsspem.so library is available at runtime, allow remote attackers to hijack the authentication of a TLS connection by leveraging reuse of a previously loaded client certificate from file for a connection for which no certificate has been set, a different vulnerability than CVE-2016-5420. | CVSS3: 7.5 | 8% Низкий | около 10 лет назад |
 | CVE-2016-7141 curl and libcurl before 7.50.2, when built with NSS and the libnsspem.so library is available at runtime, allow remote attackers to hijack the authentication of a TLS connection by leveraging reuse of a previously loaded client certificate from file for a connection for which no certificate has been set, a different vulnerability than CVE-2016-5420. | CVSS3: 4.2 | 8% Низкий | около 10 лет назад |
 | CVE-2016-7141 curl and libcurl before 7.50.2, when built with NSS and the libnsspem.so library is available at runtime, allow remote attackers to hijack the authentication of a TLS connection by leveraging reuse of a previously loaded client certificate from file for a connection for which no certificate has been set, a different vulnerability than CVE-2016-5420. | CVSS3: 7.5 | 8% Низкий | около 10 лет назад |
| CVE-2016-7141 curl and libcurl before 7.50.2, when built with NSS and the libnsspem. ... | CVSS3: 7.5 | 8% Низкий | около 10 лет назад |
| GHSA-vx32-35rm-8jq5 curl and libcurl before 7.50.2, when built with NSS and the libnsspem.so library is available at runtime, allow remote attackers to hijack the authentication of a TLS connection by leveraging reuse of a previously loaded client certificate from file for a connection for which no certificate has been set, a different vulnerability than CVE-2016-5420. | CVSS3: 7.5 | 8% Низкий | больше 4 лет назад |
| ALT-PU-2016-1956 ALT-PU-2016-1956: package `curl` update to version 7.50.2-alt1 | CVSS3: 7.5 | 8% Низкий | около 10 лет назад |
| SUSE-SU-2018:0230-1 Security update for curl | почти 9 лет назад | ||
| CVE-2016-5420 curl and libcurl before 7.50.1 do not check the client certificate when choosing the TLS connection to reuse, which might allow remote attackers to hijack the authentication of the connection by leveraging a previously created connection with a different client certificate. | CVSS3: 7.5 | 15% Средний | около 10 лет назад |
| CVE-2016-5420 curl and libcurl before 7.50.1 do not check the client certificate when choosing the TLS connection to reuse, which might allow remote attackers to hijack the authentication of the connection by leveraging a previously created connection with a different client certificate. | CVSS3: 4.2 | 15% Средний | больше 10 лет назад |
| CVE-2016-5420 curl and libcurl before 7.50.1 do not check the client certificate when choosing the TLS connection to reuse, which might allow remote attackers to hijack the authentication of the connection by leveraging a previously created connection with a different client certificate. | CVSS3: 7.5 | 15% Средний | около 10 лет назад |
| CVE-2016-5420 curl and libcurl before 7.50.1 do not check the client certificate whe ... | CVSS3: 7.5 | 15% Средний | около 10 лет назад |
| SUSE-SU-2017:2699-1 Security update for SLES 12 Docker image | около 9 лет назад | ||
| SUSE-SU-2017:2700-1 Security update for SLES 12-SP1 Docker image | около 9 лет назад | ||
| CVE-2016-5419 curl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate has changed, which allows remote attackers to bypass intended restrictions by resuming a session. | CVSS3: 7.5 | 15% Средний | около 10 лет назад |
| CVE-2016-5419 curl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate has changed, which allows remote attackers to bypass intended restrictions by resuming a session. | CVSS3: 4.8 | 15% Средний | больше 10 лет назад |
Уязвимостей на страницу