CVE-2015-3237

🗓️ 22 Jun 2015 19:00:00Reported by redhatType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 112 Views

The smb_request_state function in cURL and libcurl 7.40.0 through 7.42.1 allows remote SMB servers to obtain sensitive information from memory or cause a denial of servic

Reporter	Title	Published	Views	Family All 46
IBM Security Bulletins	Security Bulletin: A vulnerability in libcURL affects IBM Tivoli Netcool System Service Monitors/Application Service Monitors (CVE-2015-3237)	17 Jun 201815:21	–	ibm
ALT Linux	Security fix for the ALT Linux 8 package curl version 7.43.0-alt1	19 Jun 201500:00	–	altlinux
Amazon	Medium: curl	18 Jun 201500:00	–	amazon
Tenable Nessus	Amazon Linux AMI : curl (ALAS-2015-551)	22 Jun 201500:00	–	nessus
Tenable Nessus	Fedora 22 : curl-7.40.0-5.fc22 (2015-10155)	25 Jun 201500:00	–	nessus
Tenable Nessus	FreeBSD : cURL -- Multiple Vulnerability (2438d4af-1538-11e5-a106-3c970e169bc2)	18 Jun 201500:00	–	nessus
Tenable Nessus	GLSA-201509-02 : cURL: Multiple vulnerabilities	25 Sep 201500:00	–	nessus
Tenable Nessus	Oracle GlassFish Server 3.1.2.x < 3.1.2.15 Multiple Vulnerabilities (July 2016 CPU)	20 Jul 201600:00	–	nessus
Tenable Nessus	Oracle GlassFish Server 3.0.1.x < 3.0.1.14 Multiple Vulnerabilities (July 2016 CPU)	20 Jul 201600:00	–	nessus
Tenable Nessus	HP System Management Homepage Multiple Vulnerabilities (HPSBMU03593)	18 May 201600:00	–	nessus

NVD

Node

haxx curlMatch7.40.0

haxx curlMatch7.41.0

haxx curlMatch7.42.0

haxx curlMatch7.42.1

haxx libcurlMatch7.40.0

haxx libcurlMatch7.41.0

haxx libcurlMatch7.42.0

haxx libcurlMatch7.42.1

Node

hp system_management_homepageRange≤7.5.3.1

Node

oracle enterprise_manager_ops_centerMatch12.1.4

oracle enterprise_manager_ops_centerMatch12.2.2

oracle enterprise_manager_ops_centerMatch12.3.2

oracle glassfish_serverMatch3.0.1

oracle glassfish_serverMatch3.1.2

Source	Link
securitytracker	www.securitytracker.com/id/1036371
h20566	www.h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay
oracle	www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
security	www.security.gentoo.org/glsa/201509-02
curl	www.curl.haxx.se/docs/adv_20150617B.html
lists	www.lists.fedoraproject.org/pipermail/package-announce/2015-June/160660.html
securityfocus	www.securityfocus.com/bid/91787
securityfocus	www.securityfocus.com/bid/75387
oracle	www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
h20566	www.h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay

06 May 2026 22:30Current

8.1High risk

Vulners AI Score8.1

CVSS 26.4

EPSS0.05127

CWE-20