Updated curl packages fix security vulnerability: When libcurl sends a request to a server via a HTTP proxy, it copies the entire URL into the request and sends if off. If the given URL contains line feeds and carriage returns those will be sent along to the proxy too, which allows the program to for example send a separate HTTP request injected embedded in the URL (CVE-2014-8150).

OSVersionArchitecturePackageVersionFilename
Mageia4noarchcurl< 7.34.0-1.5curl-7.34.0-1.5.mga4

OS	Version	Architecture	Package	Version	Filename
Mageia	4	noarch	curl	< 7.34.0-1.5	curl-7.34.0-1.5.mga4

References

curl.haxx.se/docs/adv_20150108B.html

bugs.mageia.org/show_bug.cgi?id=14985

osv 2

nessus 29

prion 1

cve 1

openvas 20

securityvulns 4

hackerone 1

freebsd 2

debiancve 1

fedora 7

archlinux 1

ubuntucve 1

debian 3

checkpoint_advisories 1

ibm 10

ubuntu 1

amazon 1

f5 2

redhat 2

oraclelinux 2

veracode 1

centos 2

gentoo 1

oracle 1

osv

curl - security update

2015-01-15 00:00:00

curl - security update

2015-01-08 00:00:00

nessus

FreeBSD : asterisk -- Mitigation for libcURL HTTP request injection vulnerability (7656fc62-a7a7-11e4-96ba-001999f8d30b)

2015-01-30 00:00:00

Debian DSA-3122-1 : curl - security update

2015-01-09 00:00:00

Mandriva Linux Security Advisory : curl (MDVSA-2015:021)

2015-01-13 00:00:00

prion

Crlf injection

2015-01-15 15:59:00

cve

CVE-2014-8150

2015-01-15 15:59:00

openvas

Mageia: Security Advisory (MGASA-2015-0020)

2022-01-28 00:00:00

Fedora Update for curl FEDORA-2015-0415

2015-01-12 00:00:00

Debian Security Advisory DSA 3122-1 (curl - security update)

2015-01-08 00:00:00

securityvulns

[ MDVSA-2015:021 ] curl

2015-01-13 00:00:00

libCurl headers injection

2015-01-13 00:00:00

APPLE-SA-2015-08-13-2 OS X Yosemite v10.10.5 and Security Update 2015-006

2015-08-17 00:00:00

hackerone

Internet Bug Bounty: libcurl: URL request injection

2014-12-25 00:00:00

freebsd

cURL -- URL request injection vulnerability

2014-12-25 00:00:00

asterisk -- Mitigation for libcURL HTTP request injection vulnerability

2015-01-12 00:00:00

debiancve

CVE-2014-8150

2015-01-15 15:59:00

fedora

[SECURITY] Fedora 21 Update: curl-7.37.0-12.fc21

2015-01-11 10:56:19

[SECURITY] Fedora 22 Update: asterisk-13.3.2-1.fc22

2015-07-21 08:17:44

[SECURITY] Fedora 20 Update: curl-7.32.0-18.fc20

2015-01-10 11:56:13

archlinux

curl: url request injection

2015-01-18 00:00:00

ubuntucve

CVE-2014-8150

2015-01-08 00:00:00

debian

[SECURITY] [DLA 134-1] curl security update

2015-01-15 21:10:23

[SECURITY] [DSA 3122-1] curl security update

2015-01-08 19:35:34

[SECURITY] [DSA 3122-1] curl security update

2015-01-08 19:35:34

checkpoint_advisories

Web Server HTTP Request URL Injection (CVE-2014-8150)

2016-08-28 00:00:00

ibm

Security Bulletin: A vulnerability in cURL libcURL affects IBM Tivoli Composite Application Manager for Transactions (CVE-2014-8150)

2018-06-17 14:56:42

Security Bulletin: Vulnerabilities in cURL and libcURL affect IBM Security Access Manager (CVE-2014-3613, CVE-2014-8150)

2018-06-16 21:39:01

Security Bulletin: Multiple vulnerabilities in cURL libcURL affect IBM Tivoli Netcool System Service Monitors/Application Service Monitors (CVE-2014-8150, 2014-8151)

2018-06-17 14:56:42

ubuntu

curl vulnerability

2015-01-15 00:00:00

amazon

Medium: curl

2015-02-11 19:36:00

K85307687 : cURL and libcurl vulnerabilities CVE-2014-3613, CVE-2014-3707, and CVE-2014-8150

2016-11-16 00:00:00

SOL85307687 - cURL and libcurl vulnerabilities CVE-2014-3613, CVE-2014-3707, and CVE-2014-8150

2016-11-16 00:00:00

redhat

(RHSA-2015:2159) Moderate: curl security, bug fix, and enhancement update

2015-11-19 14:41:12

(RHSA-2015:1254) Moderate: curl security, bug fix, and enhancement update

2015-07-22 05:29:46

oraclelinux

curl security, bug fix, and enhancement update

2015-11-23 00:00:00

curl security, bug fix, and enhancement update

2015-07-28 00:00:00

veracode

CRLF Injection

2019-05-02 05:40:50

centos

curl, libcurl security update

2015-11-30 19:26:37

curl, libcurl security update

2015-07-26 14:12:23

gentoo

cURL: Multiple vulnerabilities

2017-01-19 00:00:00

oracle

Oracle Critical Patch Update Advisory - October 2015

2015-10-20 00:00:00

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.005 Low

EPSS

Percentile

77.1%

JSON

Related for MGASA-2015-0020