Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2014-3620HistoryNov 18, 2014 - 3:59 p.m.
CVE-2014-3620
2014-11-1815:59:00
Debian Security Bug Tracker
security-tracker.debian.org
11
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.005 Low
EPSS
Percentile
77.2%
cURL and libcurl before 7.38.0 allow remote attackers to bypass the Same Origin Policy and set cookies for arbitrary sites by setting a cookie for a top-level domain.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | curl | < 7.38.0-1 | curl_7.38.0-1_all.deb |
| Debian | 11 | all | curl | < 7.38.0-1 | curl_7.38.0-1_all.deb |
| Debian | 10 | all | curl | < 7.38.0-1 | curl_7.38.0-1_all.deb |
| Debian | 999 | all | curl | < 7.38.0-1 | curl_7.38.0-1_all.deb |
| Debian | 13 | all | curl | < 7.38.0-1 | curl_7.38.0-1_all.deb |
Related
myhack58
myhack58
ubuntucve
ubuntucve
CVE-2014-3620
2014-09-10 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2019-1179)
2020-01-23 00:00:00
Amazon Linux: Security Advisory (ALAS-2014-407)
2015-09-08 00:00:00
Ubuntu: Security Advisory (USN-2346-1)
2014-09-16 00:00:00
prion
prion
Design/Logic Flaw
2014-11-18 15:59:00
cve
cve
CVE-2014-3620
2014-11-18 15:59:00
nessus
nessus
EulerOS Virtualization 2.5.3 : curl (EulerOS-SA-2019-1179)
2019-04-09 00:00:00
Fedora 19 : curl-7.29.0-23.fc19 (2014-10714)
2014-10-09 00:00:00
Debian DSA-3022-1 : curl - security update
2014-09-11 00:00:00
veracode
veracode
Same Origin Policy Bypass
2018-08-13 03:00:56
ibm
ibm
Security Bulletin: Multiple vulnerabilities in cURL libcURL affect IBM Tivoli Netcool System Service Monitors/Application Service Monitors (CVE-2014-3613 CVE-2014-3620)
2018-06-17 14:50:46
securityvulns
securityvulns
libcurl information leakage
2014-09-15 00:00:00
[SECURITY] [DSA 3022-1] curl security update
2014-09-15 00:00:00
ESA-2015-002: Unisphere Central Security Update for Multiple Vulnerabilities
2015-02-02 00:00:00
mageia
mageia
Updated curl packages fix security vulnerabilities
2014-09-24 20:44:28
amazon
amazon
Medium: curl
2014-09-17 21:45:00
osv
osv
curl - security update
2014-09-10 00:00:00
suse
suse
curl (important)
2014-09-17 23:04:13
debian
debian
[SECURITY] [DSA 3022-1] curl security update
2014-09-10 17:51:18
ubuntu
ubuntu
curl vulnerabilities
2014-09-15 00:00:00
hackerone
hackerone
curl: CVE-2022-27779: cookie for trailing dot TLD
2022-04-28 08:30:28
fedora
fedora
[SECURITY] Fedora 21 Update: curl-7.37.0-7.fc21
2014-09-23 04:25:49
[SECURITY] Fedora 20 Update: curl-7.32.0-15.fc20
2014-11-10 06:44:02
[SECURITY] Fedora 20 Update: curl-7.32.0-17.fc20
2014-12-13 09:46:18
rosalinux
rosalinux
Advisory ROSA-SA-2021-1818
2021-07-02 16:36:57
photon
photon
Critical Photon OS Security Update - PHSA-2023-4.0-0420
2023-07-05 00:00:00
Critical Photon OS Security Update - PHSA-2023-3.0-0603
2023-06-26 00:00:00
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.005 Low
EPSS
Percentile
77.2%
Related for DEBIANCVE:CVE-2014-3620