Juniper Networks Junos OS Multiple cURL and libcurl Vulnerabilities

Junos OS is prone to multiple vulnerabilities in cURL and libcurl. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"...

CVE-2014-8151

CVE-2014-8151 affects libcurl’s DarwinSSL (SecureTransport) back-end. The darwinssl_connect_step1 function fails to verify whether a cached TLS session validated the certificate when the session is reused, enabling MITM-style server spoofing via crafted certificates. Documented impact is limited ...