curl: CVE-2022-27779: cookie for trailing dot TLD

🗓️ 28 Apr 2022 08:30:28Reported by haxatron1Type

hackerone

hackerone🔗 hackerone.com👁 84 Views

CVE-2014-3620: curl allows cookie for trailing dot TL

Reporter	Title	Published	Views	Family All 151
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Curl affect PowerSC	23 Sep 202222:05	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities in Rational DOORS (CVE-2014-3613, CVE-2014-3620, CVE-2014-8730, CVE-2014-9495, CVE-2015-0973)	1 May 202008:19	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in libcURL affect IBM Rational ClearCase ( CVE-2022-27778, CVE-2022-27779, CVE-2022-27780, CVE-2022-27782, CVE-2022-30115, CVE-2022-27774 )	25 Jul 202214:49	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in cURL libcURL affect IBM Tivoli Netcool System Service Monitors/Application Service Monitors (CVE-2014-3613 CVE-2014-3620)	17 Jun 201814:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MaaS360 Cloud Extender Agent and Base Module use libcurl with multiple known vulnerabilities	6 Oct 202204:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM BladeCenter Advanced Management Module is affected by cURL/libcURL vulnerabilities (CVE-2014-3613, CVE-2014-3620)	31 Jan 201901:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Engineering Requirements Management DOORS/DWA vulnerabilities fixed in 9.7.2.7	24 Oct 202411:46	–	ibm
FreeBSD	curl -- Multiple vulnerabilities	11 May 202200:00	–	freebsd
ALT Linux	Security fix for the ALT Linux 10 package curl version 7.83.1-alt1	19 May 202200:00	–	altlinux
Tenable Nessus	cURL/libcURL 7.x < 7.38.0 Multiple Vulnerabilities	11 Sep 201400:00	–	nessus

11 May 2022 07:59Current

6.8Medium risk

Vulners AI Score6.8

EPSS0.01306

cve-2014-3620 cookie parser top level domains trailing dot tlds curl security vulnerability bugbounty