Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2015-3153

🗓️ 01 May 2015 15:00:00Reported by redhatType 
cve
 cve🔗 web.nvd.nist.gov👁 129 Views

The default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both the proxy and destination server, which might allow remote proxy servers to obtain sensitive information by reading the header contents

Related
Detection
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities affect IBM Flex System Chassis Management Module
31 Jan 201902:25
–ibm
IBM Security Bulletins		Security Bulletin: Vulnerabilities in curl affect IBM Security Network Intrusion Prevention System
23 Feb 202219:48
–ibm
IBM Security Bulletins		Security Bulletin: Vulnerabilities in curl affect Power Hardware Management Console (CVE-2015-3143 CVE-2015-3148 CVE-2015-3153 CVE-2014-3613 CVE-2014-3707 CVE-2014-8150)
23 Sep 202101:31
–ibm
IBM Security Bulletins		Security Bulletin: Vulnerability in cURL component shipped with IBM Rational ClearCase (CVE-2015-3153)
10 Jul 201808:34
–ibm
IBM Security Bulletins		Security Bulletin: Vulnerabilities in libcurl and cURL affect Rational DOORS (CVE-2015-3143, CVE-2015-3144, CVE-2015-3145, CVE-2015-3148, CVE-2015-3153, CVE-2015-3236)
1 May 202008:19
–ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities in curl affect IBM Flex System Manager (FSM)
18 Jun 201801:30
–ibm
FreeBSD		cURL -- sensitive HTTP server headers also sent to proxies
29 Apr 201500:00
–freebsd
ALT Linux		Security fix for the ALT Linux 8 package curl version 7.42.1-alt1
29 Apr 201500:00
–altlinux
Tenable Nessus		cURL / libcURL 7.x < 7.42.1 Proxied Traffic HTTP Server Header Remote Disclosure
15 Sep 201500:00
–nessus
Tenable Nessus		Mac OS X < 10.10.5 Multiple Vulnerabilities
16 Oct 201500:00
–nessus
Rows per page
NVD
Node
oracleenterprise_manager_ops_centerRange≤12.1.3
OR
oracleenterprise_manager_ops_centerMatch12.2.0
OR
oracleenterprise_manager_ops_centerMatch12.2.1
OR
oracleenterprise_manager_ops_centerMatch12.3.0
Node
haxxcurlRange≤7.42.0
OR
haxxlibcurlRange≤7.42.0
Node
canonicalubuntu_linuxMatch12.04lts
OR
canonicalubuntu_linuxMatch14.04lts
OR
canonicalubuntu_linuxMatch14.10
OR
canonicalubuntu_linuxMatch15.1
Node
applemac_os_xMatch10.10.4
Node
debiandebian_linuxMatch8.0

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
06 May 2026 22:30Current
8.2High risk
Vulners AI Score8.2
CVSS 25
EPSS0.08372
CWE-200
curllibcurlcve-2015-3153security vulnerabilityhttp headersproxy server
129