Lucene search
F5SOL85307687HistoryNov 16, 2016 - 12:00 a.m.
SOL85307687 - cURL and libcurl vulnerabilities CVE-2014-3613, CVE-2014-3707, and CVE-2014-8150
2016-11-1600:00:00
support.f5.com
38
EPSS
0.006
Percentile
78.3%
Vulnerability Recommended Actions
If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in theVersions known to be not vulnerable column. If the table lists only an older version than what you are currently running, or does not list a non-vulnerable version, then no upgrade candidate currently exists.
Mitigation
To mitigate this vulnerability, you should only permit access to the ARX system over a secure network and limit login access to trusted users.
Supplemental Information
- SOL9970: Subscribing to email notifications regarding F5 products
- SOL9957: Creating a custom RSS feed to view new and updated documents
- SOL4602: Overview of the F5 security vulnerability response policy
- SOL4918: Overview of the F5 critical issue hotfix policy
Related
f5
f5
nessus
nessus
SuSE 11.3 Security Update : curl (SAT Patch Number 10166)
2015-02-02 00:00:00
openSUSE Security Update : curl (openSUSE-2015-125)
2015-02-11 00:00:00
SUSE SLED12 / SLES12 Security Update : curl (SUSE-SU-2015:0083-1)
2015-05-20 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2015:0083-1)
2021-04-19 00:00:00
Amazon Linux: Security Advisory (ALAS-2015-477)
2015-09-08 00:00:00
Oracle: Security Advisory (ELSA-2015-1254)
2015-10-06 00:00:00
ibm
ibm
amazon
amazon
Medium: curl
2015-02-11 19:36:00
Medium: curl
2014-09-17 21:45:00
veracode
veracode
centos
centos
curl, libcurl security update
2015-11-30 19:26:37
curl, libcurl security update
2015-07-26 14:12:23
oraclelinux
oraclelinux
curl security, bug fix, and enhancement update
2015-07-28 00:00:00
curl security, bug fix, and enhancement update
2015-11-23 00:00:00
redhat
redhat
(RHSA-2015:2159) Moderate: curl security, bug fix, and enhancement update
2015-11-19 14:41:12
(RHSA-2015:1254) Moderate: curl security, bug fix, and enhancement update
2015-07-22 05:29:46
fedora
fedora
[SECURITY] Fedora 21 Update: mingw-curl-7.39.0-1.fc21
2015-01-02 05:06:16
[SECURITY] Fedora 21 Update: mingw-curl-7.42.0-1.fc21
2015-05-04 15:28:35
[SECURITY] Fedora 21 Update: curl-7.37.0-12.fc21
2015-01-11 10:56:19
freebsd
freebsd
cURL -- URL request injection vulnerability
2014-12-25 00:00:00
asterisk -- Mitigation for libcURL HTTP request injection vulnerability
2015-01-12 00:00:00
debiancve
debiancve
hackerone
hackerone
Internet Bug Bounty: libcurl: URL request injection
2014-12-25 00:00:00
Internet Bug Bounty: libcurl duphandle read out of bounds
2015-09-16 00:00:00
securityvulns
securityvulns
[ MDVSA-2015:021 ] curl
2015-01-13 00:00:00
libCurl headers injection
2015-01-13 00:00:00
libcurl information leakage
2014-11-24 00:00:00
prion
prion
cve
cve
osv
osv
curl - security update
2015-01-15 00:00:00
curl - security update
2015-01-08 00:00:00
curl - security update
2014-09-26 00:00:00
ubuntucve
ubuntucve
mageia
mageia
Updated curl packages fix CVE-2014-8150
2015-01-09 19:44:12
Updated curl packages fix security vulnerabilities
2014-09-24 20:44:28
Updated curl packages fix CVE-2014-3707
2014-11-14 03:57:44
debian
debian
[SECURITY] [DLA 134-1] curl security update
2015-01-15 21:10:23
[SECURITY] [DSA 3122-1] curl security update
2015-01-08 19:35:34
[SECURITY] [DSA 3122-1] curl security update
2015-01-08 19:35:34
archlinux
archlinux
curl: url request injection
2015-01-18 00:00:00
curl: out-of-bounds read
2014-11-11 00:00:00
cvelist
cvelist
checkpoint_advisories
checkpoint_advisories
Web Server HTTP Request URL Injection (CVE-2014-8150)
2016-08-28 00:00:00
ubuntu
ubuntu
curl vulnerability
2015-01-15 00:00:00
curl vulnerability
2014-11-10 00:00:00
curl vulnerabilities
2014-09-15 00:00:00
nvd
nvd
suse
suse
curl (important)
2014-09-17 23:04:13
ics
ics
Hitachi Energy MSM Product
2022-08-30 12:00:00
gentoo
gentoo
cURL: Multiple vulnerabilities
2017-01-19 00:00:00