CURL-CVE-2014-3707 duphandle read out of bounds

🗓️ 05 Nov 2014 08:00:00Reported by GoogleType

osv

osv🔗 osv.dev👁 4 Views

libcurl's duphandle bug can send unintended data during HTTP POST transfers, risking security.

Reporter	Title	Published	Views	Family All 118
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in curl affect PowerKVM	18 Jun 201801:30	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in curl affect IBM Security Network Intrusion Prevention System	23 Feb 202219:48	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in curl affect Power Hardware Management Console (CVE-2015-3143 CVE-2015-3148 CVE-2015-3153 CVE-2014-3613 CVE-2014-3707 CVE-2014-8150)	23 Sep 202101:31	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in cups, curl, libxfont affect IBM SmartCloud Provisioning for IBM Software Virtual Appliance	17 Jun 201822:30	–	ibm
IBM Security Bulletins	Security Bulletin: Fixes for Multiple Security Vulnerabilities in IBM Security Identity Manager Virtual Appliance available	16 Jun 201821:38	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in curl affect IBM Security Network Protection	16 Jun 201821:30	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in curl affect IBM Flex System Manager (FSM)	18 Jun 201801:30	–	ibm
Tenable Nessus	cURL/libcURL 7.x < 7.39.0 'curl_easy_duphandle()' Out-of-Bounds Read Issue	10 Nov 201400:00	–	nessus
Tenable Nessus	Mac OS X < 10.10.5 Multiple Vulnerabilities	16 Oct 201500:00	–	nessus
Tenable Nessus	Amazon Linux AMI : curl (ALAS-2015-477)	13 Feb 201500:00	–	nessus

27 May 2026 02:29Current

6.2Medium risk

Vulners AI Score6.2

CVSS 24.3

EPSS0.00226

libcurl bug duphandle issue http post transfer sensitive data leak memory allocation error