curl: multiple issues

🗓️ 24 Apr 2015 00:00:00Reported by Arch LinuxType

archlinux🔗 lists.archlinux.org👁 46 Views

Multiple security issues in libcurl, including NTLM authentication re-use, host name memory access, cookie parser memory access, and Negotiate authentication mishandling

Reporter	Title	Published	Views	Family All 315
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in curl affect PowerKVM	18 Jun 201801:30	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities in Open SSL, OpenSSH and curl affect the Integrated Management Module II (IMM2)	31 Jan 201901:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Flex System Chassis Management Module	31 Jan 201902:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in cURL affect System x Integrated Management Module (IMM) (CVE-2013-2174, CVE-2014-0015, CVE-2014-0138, CVE-2014-0139)	31 Jan 201901:35	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in curl affect IBM Security Network Intrusion Prevention System	23 Feb 202219:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM ToolsCenter is affected by several cURL potential vulnerabilities (CVE-2014-0015, CVE-2014-0139, CVE-2014-0138, CVE-2014-2522)	31 Jan 201901:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in curl affect Power Hardware Management Console (CVE-2015-3143 CVE-2015-3148 CVE-2015-3153 CVE-2014-3613 CVE-2014-3707 CVE-2014-8150)	23 Sep 202101:31	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in cups, curl, libxfont affect IBM SmartCloud Provisioning for IBM Software Virtual Appliance	17 Jun 201822:30	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in cURL affect System x Integrated Management Module (IMM) (CVE-2013-2174, CVE-2014-0015, CVE-2014-138, CVE-2014-0139)	31 Jan 201901:35	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in libcurl and cURL affect Rational DOORS (CVE-2015-3143, CVE-2015-3144, CVE-2015-3145, CVE-2015-3148, CVE-2015-3153, CVE-2015-3236)	1 May 202008:19	–	ibm

OS	OS Version	Architecture	Package	Package Version	Filename
any	any	any	curl	7.42.0-1	UNKNOWN

Source	Link
curl	www.curl.haxx.se/docs/adv_20150422C.html
access	www.access.redhat.com/security/cve/CVE-2015-3148
curl	www.curl.haxx.se/docs/adv_20150422B.html
curl	www.curl.haxx.se/docs/adv_20150422D.html
curl	www.curl.haxx.se/docs/adv_20150422A.html
access	www.access.redhat.com/security/cve/CVE-2015-3143
access	www.access.redhat.com/security/cve/CVE-2015-3144
access	www.access.redhat.com/security/cve/CVE-2015-3145

24 Apr 2015 00:00Current

0.3Low risk

Vulners AI Score0.3

EPSS0.67994