KLA10618 Information disclosure vulnerability in cURL

Detect date:

06/22/2015

Severity:

High

Description:

Multiple serious vulnerabilities have been found in cURL. Malicious users can exploit these vulnerabilities to obtain sensitive information.

Affected products:

cURL and libcurl versions from 7.40.0 through 7.42.1

Solution:

Update to the latest version
Get cURL

Original advisories:

cURL advisory
cURL advisory

Impacts:

OSI

Related products:

cURL

CVE-IDS:

CVE-2015-32365.0Critical
CVE-2015-32376.4High