PT-2021-5860 · Libcurl +1 · Libcurl +1

🗓️ 23 Apr 2021 00:00:00Reported by Positive TechnologiesType

Libcurl TLS cipher list flaw (7.61.0–7.76.1) allows unauthorized access via static cipher set.

Reporter	Title	Published	Views	Family All 8826
altlinux	Security fix for the ALT Linux 8 package openssl10 version 1.0.2u-alt0.M80P.1	11 Dec 202000:00	–	altlinux
altlinux	Security fix for the ALT Linux 9 package mariadb version 10.4.20-alt1	14 Jul 202100:00	–	altlinux
altlinux	Security fix for the ALT Linux 10 package openssl1.1 version 1.1.1g-alt1	21 Apr 202000:00	–	altlinux
altlinux	Security fix for the ALT Linux 10 package node version 14.4.0-alt1	19 Jun 202000:00	–	altlinux
altlinux	Security fix for the ALT Linux 10 package java-11-openjdk version 0:11.0.12.7-alt1_0jpp10	25 Aug 202100:00	–	altlinux
altlinux	Security fix for the ALT Linux 10 package openssl1.1 version 1.1.1k-alt1	25 Mar 202100:00	–	altlinux
altlinux	Security fix for the ALT Linux 10 package node version 14.15.4-alt1	5 Feb 202100:00	–	altlinux
altlinux	Security fix for the ALT Linux 10 package firefox-esr version 60.7.0-alt1	21 May 201900:00	–	altlinux
altlinux	Security fix for the ALT Linux 8 package mariadb version 10.1.48-alt1	14 Dec 202000:00	–	altlinux
altlinux	Security fix for the ALT Linux 9 package openssl1.1 version 1.1.1j-alt1	17 Mar 202100:00	–	altlinux

Source	Link
github	www.github.com/riptl/cve-2021-3449
github	www.github.com/terorie/cve-2021-3449
github	www.github.com/motikan2010/CVE-2020-5398
github	www.github.com/LeadroyaL/cve-2019-14540-exploit
github	www.github.com/irsl/CVE-2020-1967
github	www.github.com/MBHudson/CVE-2020-1971
hackerone	www.hackerone.com/reports/1172857
github	www.github.com/curl/curl/commit/bbb71507b7bab52002f9b1e0880bed6a32834511
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
bdu	www.bdu.fstec.ru/vul/2020-05074

27 Mar 2024 00:00Current

7.3High risk

Vulners AI Score7.3

CVSS 3.15.3 - 9.8

CVSS 28

CVSS 38

EPSS0.88077

SSVC