Debian Security Bug TrackerDEBIANCVE:CVE-2015-3143

HistoryApr 24, 2015 - 2:59 p.m.

CVE-2015-3143

2015-04-2414:59:00

Debian Security Bug Tracker

security-tracker.debian.org

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.009 Low

EPSS

Percentile

82.9%

JSON

cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows remote attackers to connect as other users via an unauthenticated request, a similar issue to CVE-2014-0015.

OSVersionArchitecturePackageVersionFilename
Debian12allcurl< 7.42.0-1curl_7.42.0-1_all.deb
Debian11allcurl< 7.42.0-1curl_7.42.0-1_all.deb
Debian10allcurl< 7.42.0-1curl_7.42.0-1_all.deb
Debian999allcurl< 7.42.0-1curl_7.42.0-1_all.deb
Debian13allcurl< 7.42.0-1curl_7.42.0-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	curl	< 7.42.0-1	curl_7.42.0-1_all.deb
Debian	11	all	curl	< 7.42.0-1	curl_7.42.0-1_all.deb
Debian	10	all	curl	< 7.42.0-1	curl_7.42.0-1_all.deb
Debian	999	all	curl	< 7.42.0-1	curl_7.42.0-1_all.deb
Debian	13	all	curl	< 7.42.0-1	curl_7.42.0-1_all.deb

f5 4

cve 4

nessus 57

ubuntucve 4

prion 4

fedora 16

openvas 49

securityvulns 5

veracode 3

ubuntu 2

debiancve 3

slackware 2

debian 3

amazon 4

archlinux 1

seebug 1

oraclelinux 3

redhat 4

osv 3

centos 3

alpinelinux 1

mageia 2

ibm 16

altlinux 1

kaspersky 1

gentoo 1

vmware 2

K16704 : cURL and libcurl vulnerability CVE-2015-3143

2015-05-29 00:00:00

SOL16704 - cURL and libcurl vulnerability CVE-2015-3143

2015-05-29 00:00:00

K15862 : Multiple cURL and libcurl vulnerabilities CVE-2014-0015, CVE-2014-0138, and CVE-2014-0139

2014-11-25 00:00:00

cve

CVE-2015-3143

2015-04-24 14:59:00

CVE-2014-0015

2014-02-02 00:55:00

CVE-2016-0755

2016-01-29 20:59:00

nessus

F5 Networks BIG-IP : cURL and libcurl vulnerability (K16704)

2017-04-06 00:00:00

SuSE 11.2 / 11.3 Security Update : curl (SAT Patch Numbers 8796 / 8797)

2014-02-02 00:00:00

Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / current : curl (SSA:2014-044-01)

2014-02-14 00:00:00

ubuntucve

CVE-2015-3143

2015-04-22 00:00:00

CVE-2014-0015

2014-01-31 00:00:00

CVE-2016-0755

2016-01-27 00:00:00

prion

Cross site request forgery (csrf)

2015-04-24 14:59:00

Cross site request forgery (csrf)

2014-02-02 00:55:00

Default configuration

2014-04-15 14:55:00

fedora

[SECURITY] Fedora 20 Update: curl-7.32.0-4.fc20

2014-02-03 02:46:56

[SECURITY] Fedora 20 Update: curl-7.32.0-20.fc20

2015-04-28 13:01:33

[SECURITY] Fedora 19 Update: curl-7.29.0-13.fc19

2014-02-15 20:02:19

openvas

Fedora Update for curl FEDORA-2014-1876

2014-02-03 00:00:00

Amazon Linux: Security Advisory (ALAS-2014-295)

2015-09-08 00:00:00

Debian Security Advisory DSA 2849-1 (curl - information disclosure)

2014-01-31 00:00:00

securityvulns

[SECURITY] [DSA 2849-1] curl security update

2014-02-01 00:00:00

[ MDVSA-2015:220 ] curl

2015-05-04 00:00:00

cURL security vulnerabilitiies

2015-11-01 00:00:00

veracode

Authentication Bypass

2019-01-15 08:51:58

Reusable NTLM Connections

2018-08-13 03:10:02

CRLF Injection

2019-05-02 05:40:50

ubuntu

curl vulnerability

2014-02-03 00:00:00

curl vulnerabilities

2015-04-30 00:00:00

debiancve

CVE-2014-0015

2014-02-02 00:55:00

CVE-2016-0755

2016-01-29 20:59:00

CVE-2014-0138

2014-04-15 14:55:00

slackware

curl

2014-02-13 16:38:20

[slackware-security] curl

2015-10-29 22:48:27

debian

[SECURITY] [DSA 2849-1] curl security update

2014-01-31 07:47:19

[SECURITY] [DLA 211-1] curl security update

2015-04-29 20:42:59

[SECURITY] [DSA 3232-1] curl security update

2015-04-22 12:08:24

amazon

Medium: curl

2014-02-26 16:51:00

Low: curl

2016-02-09 13:30:00

Medium: curl

2014-04-10 23:54:00

archlinux

curl: multiple issues

2015-04-24 00:00:00

seebug

cURL/libcURL NTLM连接远程安全限制绕过漏洞

2014-02-24 00:00:00

oraclelinux

curl security and bug fix update

2014-05-27 00:00:00

curl security, bug fix, and enhancement update

2015-07-28 00:00:00

curl security, bug fix, and enhancement update

2015-11-23 00:00:00

redhat

(RHSA-2014:0561) Moderate: curl security and bug fix update

2014-05-27 00:00:00

(RHSA-2015:2159) Moderate: curl security, bug fix, and enhancement update

2015-11-19 14:41:12

(RHSA-2015:1254) Moderate: curl security, bug fix, and enhancement update

2015-07-22 05:29:46

osv

CVE-2014-0138

2014-04-15 14:55:00

curl - security update

2015-04-29 00:00:00

curl - security update

2015-04-22 00:00:00

centos

curl, libcurl security update

2014-05-28 12:52:04

curl, libcurl security update

2015-07-26 14:12:23

curl, libcurl security update

2015-11-30 19:26:37

alpinelinux

CVE-2014-0138

2014-04-15 14:55:00

mageia

Updated curl packages fix multiple vulnerabilities

2014-04-03 04:56:35

Updated curl packages fix security vulnerabilities

2015-05-03 03:19:16

ibm

Security Bulletin: Multiple vulnerabilities in cURL libcURL affect IBM Tivoli Composite Application Manager for Transactions (CVE-2015-3143, CVE-2015-3144 and CVE-2015-3145)

2018-06-17 15:02:12

Security Bulletin: IBM ToolsCenter is affected by several cURL potential vulnerabilities (CVE-2014-0015, CVE-2014-0139, CVE-2014-0138, CVE-2014-2522)

2019-01-31 01:25:01

Security Bulletin: Vulnerabilities in cURL affect System x Integrated Management Module (IMM) (CVE-2013-2174, CVE-2014-0015, CVE-2014-138, CVE-2014-0139)

2019-01-31 01:35:01

altlinux

Security fix for the ALT Linux 8 package curl version 7.42.0-alt1

2015-04-22 00:00:00

kaspersky

KLA10566 Multiple vulnerabilities in cURL

2015-04-24 00:00:00

gentoo

cURL: Multiple vulnerabilities

2015-09-24 00:00:00

vmware

VMware vSphere product updates address security vulnerabilities

2014-12-04 00:00:00

VMware vSphere product updates address security vulnerabilities

2014-12-04 00:00:00

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.009 Low

EPSS

Percentile

82.9%

JSON

Related for DEBIANCVE:CVE-2015-3143