CURL-CVE-2014-3620 cookie leak for TLDs

🗓️ 10 Sep 2014 08:00:00Reported by GoogleType

osv-curl🔗 osv.dev👁 19 Views

libcurl has a cookie leak issue for Top Level Domains allowing unwanted cookie sharing across domains.

Reporter	Title	Published	Views	Family All 89
IBM Security Bulletins	Security Bulletin: Security vulnerabilities in Rational DOORS (CVE-2014-3613, CVE-2014-3620, CVE-2014-8730, CVE-2014-9495, CVE-2015-0973)	1 May 202008:19	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in cURL libcURL affect IBM Tivoli Netcool System Service Monitors/Application Service Monitors (CVE-2014-3613 CVE-2014-3620)	17 Jun 201814:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM BladeCenter Advanced Management Module is affected by cURL/libcURL vulnerabilities (CVE-2014-3613, CVE-2014-3620)	31 Jan 201901:45	–	ibm
Tenable Nessus	cURL/libcURL 7.x < 7.38.0 Multiple Vulnerabilities	11 Sep 201400:00	–	nessus
Tenable Nessus	Mac OS X < 10.10.5 Multiple Vulnerabilities	16 Oct 201500:00	–	nessus
Tenable Nessus	Amazon Linux AMI : curl (ALAS-2014-407)	12 Oct 201400:00	–	nessus
Tenable Nessus	Rocky Linux 8.6 [CIQ] Security Update: curl / curl-debuginfo / curl-debugsource / curl-minimal / etc Multiple Vulnerabilities (ciqsa-2026_0030)	1 Oct 202600:00	–	nessus
Tenable Nessus	Rocky Linux 9.2 [CIQ] Security Update: curl / curl-debuginfo / curl-debugsource / curl-minimal / etc Multiple Vulnerabilities (ciqsa-2026_0406)	1 Oct 202600:00	–	nessus
Tenable Nessus	Rocky Linux 9.6 [CIQ] Security Update: curl / curl-minimal / libcurl / libcurl-devel / libcurl-minimal Multiple Vulnerabilities (ciqsa-2026_1401)	1 Oct 202600:00	–	nessus
Tenable Nessus	Debian DSA-3022-1 : curl - security update	11 Sep 201400:00	–	nessus

27 May 2026 02:29Current

7.2High risk

Vulners AI Score7.2

CVSS 25

EPSS0.0424

libcurl cookie leak top level domains arbitrary sites unrelated domains