Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

haxx libcurl 7.42.1 vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2015-3236
cURL and libcurl 7.40.0 up to and including 7.42.1 send the HTTP Basic authentication credentials for a previous connection when reusing a reset (curl_easy_reset) connection handle to send a request to the same host name, which allows remote malicious users to obtain sensitive in...
Haxx Curl 7.42.1Haxx Libcurl 7.40.0Haxx Curl 7.40.0Haxx Curl 7.41.0Haxx Curl 7.42.0Haxx Libcurl 7.42.1Haxx Libcurl 7.41.0Haxx Libcurl 7.42.0
6.4
CVSSv2
CVE-2015-3237
The smb_request_state function in cURL and libcurl 7.40.0 up to and including 7.42.1 allows remote SMB servers to obtain sensitive information from memory or cause a denial of service (out-of-bounds read and crash) via crafted length and offset values.
Haxx Libcurl 7.40.0Haxx Libcurl 7.41.0Haxx Curl 7.40.0Haxx Curl 7.41.0Haxx Curl 7.42.0Haxx Curl 7.42.1Haxx Libcurl 7.42.0Haxx Libcurl 7.42.1Hp System Management HomepageOracle Glassfish Server 3.1.2Oracle Enterprise Manager Ops Center 12.1.4Oracle Enterprise Manager Ops Center 12.2.2Oracle Enterprise Manager Ops Center 12.3.2Oracle Glassfish Server 3.0.1
2.6
CVSSv2
CVE-2016-3739
The (1) mbed_connect_step1 function in lib/vtls/mbedtls.c and (2) polarssl_connect_step1 function in lib/vtls/polarssl.c in cURL and libcurl prior to 7.49.0, when using SSLv3 or making a TLS connection to a URL that uses a numerical IP address, allow remote malicious users to spo...
Haxx Curl 7.48.0Haxx Curl 7.47.0Haxx Curl 7.41.0Haxx Curl 7.40.0Haxx Curl 7.31.0Haxx Curl 7.30.0Haxx Curl 7.24.0Haxx Curl 7.23.1Haxx Curl 7.21.3Haxx Curl 7.21.2Haxx Curl 7.42.1Haxx Curl 7.42.0Haxx Curl 7.34.0Haxx Curl 7.33.0Haxx Curl 7.32.0Haxx Curl 7.26.0Haxx Curl 7.25.0Haxx Curl 7.21.5Haxx Curl 7.21.4Haxx Curl 7.43.0Haxx Curl 7.46.0Haxx Curl 7.36.0
5
CVSSv2
CVE-2015-3153
The default configuration for cURL and libcurl prior to 7.42.1 sends custom HTTP headers to both the proxy and destination server, which might allow remote proxy servers to obtain sensitive information by reading the header contents.
Oracle Enterprise Manager Ops Center 12.3.0Oracle Enterprise Manager Ops Center 12.2.0Oracle Enterprise Manager Ops Center 12.2.1Oracle Enterprise Manager Ops CenterHaxx LibcurlHaxx CurlCanonical Ubuntu Linux 15.1Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 14.10Canonical Ubuntu Linux 12.04Apple Mac Os X 10.10.4Debian Debian Linux 8.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-21111CVE-2024-32884IDORCVE-2023-1000CVE-2024-33260CVE-2024-3682reflected XSSrace conditionCVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook