Lucene search
+L

636 matches found

Tenable Nessus
Tenable Nessus
added 2016/09/26 12:0 a.m.26 views

openSUSE Security Update : curl (openSUSE-2016-1124)

This update for curl fixes the following issues : Security issues fixed : - CVE-2016-5419: TLS session resumption client cert bypass bsc991389 - CVE-2016-5420: Re-using connections with wrong client cert bsc991390 - CVE-2016-5421: use of connection struct after free bsc991391 - CVE-2016-7141: Fix...

8.1CVSS6.4AI score0.15063EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2016/09/19 12:0 a.m.27 views

SUSE SLED12 / SLES12 Security Update : curl (SUSE-SU-2016:2330-1)

This update for curl fixes the following issues: Security issues fixed : - CVE-2016-5419: TLS session resumption client cert bypass bsc991389 - CVE-2016-5420: Re-using connections with wrong client cert bsc991390 - CVE-2016-5421: use of connection struct after free bsc991391 - CVE-2016-7141: Fixe...

8.1CVSS6.4AI score0.15063EPSS
SaveExploits0References14
Tenable Nessus
Tenable Nessus
added 2016/09/06 12:0 a.m.31 views

openSUSE Security Update : curl (openSUSE-2016-1043)

This update for curl fixes the following issues : - fixing a performance regression with FTP boo991746 - TLS session resumption client cert bypass boo991389, CVE-2016-5419 - Re-using connections with wrong client cert boo991390, CVE-2016-5420 - use of connection struct after free boo991391,...

8.1CVSS6.8AI score0.15063EPSS
SaveExploits0References7
OSV
OSV
added 2016/08/25 1:4 p.m.10 views

SUSE-SU-2016:2155-1 Security update for curl

This update for curl fixes the following issues: - CVE-2016-5419: TLS session resumption client cert bypass bsc991389 - CVE-2016-5420: Re-using connections with wrong client cert bsc991390...

7.5CVSS7.7AI score0.15063EPSS
SaveExploits0References5
Amazon
Amazon
added 2016/08/17 12:0 a.m.52 views

Medium: curl

Issue Overview: curl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate has changed, which allows remote attackers to bypass intended restrictions by resuming a session. CVE-2016-5419 curl and libcurl before 7.50.1 do not check the client certificate when...

8.1CVSS7.7AI score0.15063EPSS
SaveExploits0
NVD
NVD
added 2016/08/10 2:59 p.m.37 views

CVE-2016-5419

curl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate has changed, which allows remote attackers to bypass intended restrictions by resuming a session...

7.5CVSS6.2AI score0.15063EPSS
SaveExploits0References19
OSV
OSV
added 2016/08/10 2:59 p.m.44 views

CVE-2016-5419

curl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate has changed, which allows remote attackers to bypass intended restrictions by resuming a session...

7.5CVSS6.9AI score0.15063EPSS
SaveExploits0References19
OSV
OSV
added 2016/08/10 2:59 p.m.3 views

DEBIAN-CVE-2016-5419

curl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate has changed, which allows remote attackers to bypass intended restrictions by resuming a session...

7.5CVSS6.5AI score0.15063EPSS
SaveExploits0References1
OSV
OSV
added 2016/08/10 2:59 p.m.5 views

ALPINE-CVE-2016-5419

curl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate has changed, which allows remote attackers to bypass intended restrictions by resuming a session...

7.5CVSS7AI score0.15063EPSS
SaveExploits0References1
Prion
Prion
added 2016/08/10 2:59 p.m.31 views

Session fixation

curl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate has changed, which allows remote attackers to bypass intended restrictions by resuming a session...

5CVSS7AI score0.15063EPSS
SaveExploits0References19Affected Software3
Cvelist
Cvelist
added 2016/08/10 2:0 p.m.37 views

CVE-2016-5419

curl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate has changed, which allows remote attackers to bypass intended restrictions by resuming a session...

6.3AI score0.15063EPSS
SaveExploits0References19
Debian CVE
Debian CVE
added 2016/08/10 2:0 p.m.36 views

CVE-2016-5419

curl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate has changed, which allows remote attackers to bypass intended restrictions by resuming a session...

7.5CVSS6.8AI score0.15063EPSS
SaveExploits0
CVE
CVE
added 2016/08/10 2:0 p.m.249 views

CVE-2016-5419

CVE-2016-5419 affects curl/libcurl up to 7.50.1, where TLS session resumption is allowed even if the client certificate changed. This enables a remote attacker to bypass client-certificate checks by resuming a previously established session, potentially hijacking authentication. CVE-2016-5420 and...

7.5CVSS7AI score0.15063EPSS
SaveExploits0References19Affected Software1
AlpineLinux
AlpineLinux
added 2016/08/10 2:0 p.m.38 views

CVE-2016-5419

curl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate has changed, which allows remote attackers to bypass intended restrictions by resuming a session...

7.5CVSS7.9AI score0.15063EPSS
SaveExploits0
OSV
OSV
added 2016/08/08 5:5 p.m.3 views

USN-3048-1 curl vulnerabilities

Bru Rom discovered that curl incorrectly handled client certificates when resuming a TLS session. CVE-2016-5419 It was discovered that curl incorrectly handled client certificates when reusing TLS connections. CVE-2016-5420 Marcelo Echeverria and Fernando Muñoz discovered that curl incorrectly...

8.1CVSS6.7AI score0.15063EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2016/08/08 12:0 a.m.32 views

Fedora 24 : curl (2016-24316f1f56)

fix re-using connections with wrong client cert CVE-2016-5420 - fix TLS session resumption client cert bypass CVE-2016-5419 - fix use of connection struct after free CVE-2016-5421 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update...

8.1CVSS6.8AI score0.15063EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2016/08/05 12:0 a.m.40 views

FreeBSD : Vulnerabilities in Curl (e4bc70fc-5a2f-11e6-a1bc-589cfc0654e1)

Curl security team reports : CVE-2016-5419 - TLS session resumption client cert bypass CVE-2016-5420 - Re-using connections with wrong client cert CVE-2016-5421 - use of connection struct after free %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in th...

8.1CVSS6.8AI score0.15063EPSS
SaveExploits0References7
OSV
OSV
added 2016/08/03 8:0 a.m.11 views

CURL-CVE-2016-5419 TLS session resumption client cert bypass

libcurl would attempt to resume a TLS session even if the client certificate had changed. That is unacceptable since a server by specification is allowed to skip the client certificate check on resume, and may instead use the old identity which was established by the previous certificate or no...

7.5CVSS7.5AI score0.15063EPSS
SaveExploits0
curl security advisories
curl security advisories
added 2016/08/03 8:0 a.m.18 views

TLS session resumption client cert bypass

libcurl would attempt to resume a TLS session even if the client certificate had changed. That is unacceptable since a server by specification is allowed to skip the client certificate check on resume, and may instead use the old identity which was established by the previous certificate or no...

7.5CVSS6.4AI score0.15063EPSS
SaveExploits0Affected Software2
UbuntuCve
UbuntuCve
added 2016/08/03 12:0 a.m.35 views

CVE-2016-5419

curl and libcurl before 7.50.1 do not prevent TLS session resumption when the client certificate has changed, which allows remote attackers to bypass intended restrictions by resuming a session...

7.5CVSS6.8AI score0.15063EPSS
SaveExploits0References3
Rows per page
Query Builder